git.sur5r.net Git - openldap/blob - servers/slapd/back-mdb/modify.c

   1 /* modify.c - mdb backend modify routine */
   2 /* $OpenLDAP$ */
   3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   4  *
   5  * Copyright 2000-2017 The OpenLDAP Foundation.
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted only as authorized by the OpenLDAP
  10  * Public License.
  11  *
  12  * A copy of this license is available in the file LICENSE in the
  13  * top-level directory of the distribution or, alternatively, at
  14  * <http://www.OpenLDAP.org/license.html>.
  15  */
  16
  17 #include "portable.h"
  18
  19 #include <stdio.h>
  20 #include <ac/string.h>
  21 #include <ac/time.h>
  22
  23 #include "back-mdb.h"
  24
  25 static struct berval scbva[] = {
  26         BER_BVC("glue"),
  27         BER_BVNULL
  28 };
  29
  30 static void
  31 mdb_modify_idxflags(
  32         Operation *op,
  33         AttributeDescription *desc,
  34         int got_delete,
  35         Attribute *newattrs,
  36         Attribute *oldattrs )
  37 {
  38         struct berval   ix_at;
  39         AttrInfo        *ai;
  40
  41         /* check if modified attribute was indexed
  42          * but not in case of NOOP... */
  43         ai = mdb_index_mask( op->o_bd, desc, &ix_at );
  44         if ( ai ) {
  45                 if ( got_delete ) {
  46                         Attribute       *ap;
  47                         struct berval   ix2;
  48
  49                         ap = attr_find( oldattrs, desc );
  50                         if ( ap ) ap->a_flags |= SLAP_ATTR_IXDEL;
  51
  52                         /* ITS#8678 FIXME
  53                          * If using 32bit hashes, or substring index, must account for
  54                          * possible index collisions. If no substring index, and using
  55                          * 64bit hashes, assume we don't need to check for collisions.
  56                          *
  57                          * In 2.5 use refcounts and avoid all of this mess.
  58                          */
  59                         if (!slap_hash64(-1) || (ai->ai_indexmask & SLAP_INDEX_SUBSTR)) {
  60                                 /* Find all other attrs that index to same slot */
  61                                 for ( ap = newattrs; ap; ap = ap->a_next ) {
  62                                         ai = mdb_index_mask( op->o_bd, ap->a_desc, &ix2 );
  63                                         if ( ai && ix2.bv_val == ix_at.bv_val )
  64                                                 ap->a_flags |= SLAP_ATTR_IXADD;
  65                                 }
  66                         }
  67
  68                 } else {
  69                         Attribute       *ap;
  70
  71                         ap = attr_find( newattrs, desc );
  72                         if ( ap ) ap->a_flags |= SLAP_ATTR_IXADD;
  73                 }
  74         }
  75 }
  76
  77 int mdb_modify_internal(
  78         Operation *op,
  79         MDB_txn *tid,
  80         Modifications *modlist,
  81         Entry *e,
  82         const char **text,
  83         char *textbuf,
  84         size_t textlen )
  85 {
  86         struct mdb_info *mdb = (struct mdb_info *) op->o_bd->be_private;
  87         int rc, err;
  88         Modification    *mod;
  89         Modifications   *ml;
  90         Attribute       *save_attrs;
  91         Attribute       *ap, *aold, *anew;
  92         int                     glue_attr_delete = 0;
  93         int                     softop, chkpresent;
  94         int                     got_delete;
  95         int                     a_flags;
  96         MDB_cursor      *mvc = NULL;
  97
  98         Debug( LDAP_DEBUG_TRACE, "mdb_modify_internal: 0x%08lx: %s\n",
  99                 e->e_id, e->e_dn, 0);
 100
 101         if ( !acl_check_modlist( op, e, modlist )) {
 102                 return LDAP_INSUFFICIENT_ACCESS;
 103         }
 104
 105         /* save_attrs will be disposed of by caller */
 106         save_attrs = e->e_attrs;
 107         e->e_attrs = attrs_dup( e->e_attrs );
 108
 109         for ( ml = modlist; ml != NULL; ml = ml->sml_next ) {
 110                 int match;
 111                 mod = &ml->sml_mod;
 112                 switch( mod->sm_op ) {
 113                 case LDAP_MOD_ADD:
 114                 case LDAP_MOD_REPLACE:
 115                         if ( mod->sm_desc == slap_schema.si_ad_structuralObjectClass ) {
 116                                 value_match( &match, slap_schema.si_ad_structuralObjectClass,
 117                                         slap_schema.si_ad_structuralObjectClass->
 118                                                 ad_type->sat_equality,
 119                                         SLAP_MR_VALUE_OF_ATTRIBUTE_SYNTAX,
 120                                         &mod->sm_values[0], &scbva[0], text );
 121                                 if ( !match ) glue_attr_delete = 1;
 122                         }
 123                 }
 124                 if ( glue_attr_delete )
 125                         break;
 126         }
 127
 128         if ( glue_attr_delete ) {
 129                 Attribute       **app = &e->e_attrs;
 130                 while ( *app != NULL ) {
 131                         if ( !is_at_operational( (*app)->a_desc->ad_type )) {
 132                                 Attribute *save = *app;
 133                                 *app = (*app)->a_next;
 134                                 attr_free( save );
 135                                 continue;
 136                         }
 137                         app = &(*app)->a_next;
 138                 }
 139         }
 140
 141         for ( ml = modlist; ml != NULL; ml = ml->sml_next ) {
 142                 mod = &ml->sml_mod;
 143                 got_delete = 0;
 144
 145                 aold = attr_find( e->e_attrs, mod->sm_desc );
 146                 if (aold)
 147                         a_flags = aold->a_flags;
 148                 else
 149                         a_flags = 0;
 150
 151                 switch ( mod->sm_op ) {
 152                 case LDAP_MOD_ADD:
 153                         softop = 0;
 154                         chkpresent = 0;
 155                         Debug(LDAP_DEBUG_ARGS,
 156                                 "mdb_modify_internal: add %s\n",
 157                                 mod->sm_desc->ad_cname.bv_val, 0, 0);
 158
 159 do_add:
 160                         err = modify_add_values( e, mod, get_permissiveModify(op),
 161                                 text, textbuf, textlen );
 162
 163                         if( softop ) {
 164                                 mod->sm_op = SLAP_MOD_SOFTADD;
 165                                 if ( err == LDAP_TYPE_OR_VALUE_EXISTS )
 166                                         err = LDAP_SUCCESS;
 167                         }
 168                         if( chkpresent ) {
 169                                 mod->sm_op = SLAP_MOD_ADD_IF_NOT_PRESENT;
 170                         }
 171
 172                         if( err != LDAP_SUCCESS ) {
 173                                 Debug(LDAP_DEBUG_ARGS, "mdb_modify_internal: %d %s\n",
 174                                         err, *text, 0);
 175                         } else {
 176                                 if (!aold)
 177                                         anew = attr_find( e->e_attrs, mod->sm_desc );
 178                                 else
 179                                         anew = aold;
 180                                 /* check for big multivalued attrs */
 181                                 if ( anew->a_numvals > mdb->mi_multi_hi )
 182                                         anew->a_flags |= SLAP_ATTR_BIG_MULTI;
 183                                 if ( anew->a_flags & SLAP_ATTR_BIG_MULTI ) {
 184                                         if (!mvc) {
 185                                                 err = mdb_cursor_open( tid, mdb->mi_dbis[MDB_ID2VAL], &mvc );
 186                                                 if (err) {
 187 mval_fail:                                      strncpy( textbuf, mdb_strerror( err ), textlen );
 188                                                         err = LDAP_OTHER;
 189                                                         break;
 190                                                 }
 191                                         }
 192                                         /* if prev was set, just add new values */
 193                                         if (a_flags & SLAP_ATTR_BIG_MULTI ) {
 194                                                 anew = (Attribute *)mod;
 195                                                 /* Tweak nvals */
 196                                                 if (!anew->a_nvals)
 197                                                         anew->a_nvals = anew->a_vals;
 198                                         }
 199                                         err = mdb_mval_put(op, mvc, e->e_id, anew);
 200                                         if (a_flags & SLAP_ATTR_BIG_MULTI ) {
 201                                                 /* Undo nvals tweak */
 202                                                 if (anew->a_nvals == anew->a_vals)
 203                                                         anew->a_nvals = NULL;
 204                                         }
 205                                         if ( err )
 206                                                 goto mval_fail;
 207                                 }
 208                         }
 209                         break;
 210
 211                 case LDAP_MOD_DELETE:
 212                         if ( glue_attr_delete ) {
 213                                 err = LDAP_SUCCESS;
 214                                 break;
 215                         }
 216
 217                         softop = 0;
 218                         Debug(LDAP_DEBUG_ARGS,
 219                                 "mdb_modify_internal: delete %s\n",
 220                                 mod->sm_desc->ad_cname.bv_val, 0, 0);
 221 do_del:
 222                         err = modify_delete_values( e, mod, get_permissiveModify(op),
 223                                 text, textbuf, textlen );
 224
 225                         if (softop) {
 226                                 mod->sm_op = SLAP_MOD_SOFTDEL;
 227                                 if ( err == LDAP_NO_SUCH_ATTRIBUTE ) {
 228                                         err = LDAP_SUCCESS;
 229                                         softop = 2;
 230                                 }
 231                         }
 232
 233                         if( err != LDAP_SUCCESS ) {
 234                                 Debug(LDAP_DEBUG_ARGS, "mdb_modify_internal: %d %s\n",
 235                                         err, *text, 0);
 236                         } else {
 237                                 if (softop != 2)
 238                                         got_delete = 1;
 239                                 /* check for big multivalued attrs */
 240                                 if (a_flags & SLAP_ATTR_BIG_MULTI) {
 241                                         Attribute a_dummy;
 242                                         if (!mvc) {
 243                                                 err = mdb_cursor_open( tid, mdb->mi_dbis[MDB_ID2VAL], &mvc );
 244                                                 if (err)
 245                                                         goto mval_fail;
 246                                         }
 247                                         if ( mod->sm_numvals ) {
 248                                                 anew = attr_find( e->e_attrs, mod->sm_desc );
 249                                                 if ( anew ) {
 250                                                         if ( anew->a_numvals < mdb->mi_multi_lo ) {
 251                                                                 anew->a_flags ^= SLAP_ATTR_BIG_MULTI;
 252                                                                 anew = NULL;
 253                                                         } else {
 254                                                                 anew = (Attribute *)mod;
 255                                                         }
 256                                                 }
 257                                         } else {
 258                                                 anew = NULL;
 259                                         }
 260                                         if (!anew) {
 261                                         /* delete all values */
 262                                                 anew = &a_dummy;
 263                                                 anew->a_desc = mod->sm_desc;
 264                                                 anew->a_numvals = 0;
 265                                         }
 266                                         err = mdb_mval_del( op, mvc, e->e_id, anew );
 267                                         if ( err )
 268                                                 goto mval_fail;
 269                                 }
 270                         }
 271                         break;
 272
 273                 case LDAP_MOD_REPLACE:
 274                         Debug(LDAP_DEBUG_ARGS,
 275                                 "mdb_modify_internal: replace %s\n",
 276                                 mod->sm_desc->ad_cname.bv_val, 0, 0);
 277                         err = modify_replace_values( e, mod, get_permissiveModify(op),
 278                                 text, textbuf, textlen );
 279                         if( err != LDAP_SUCCESS ) {
 280                                 Debug(LDAP_DEBUG_ARGS, "mdb_modify_internal: %d %s\n",
 281                                         err, *text, 0);
 282                         } else {
 283                                 got_delete = 1;
 284                                 if (a_flags & SLAP_ATTR_BIG_MULTI) {
 285                                         Attribute a_dummy;
 286                                         if (!mvc) {
 287                                                 err = mdb_cursor_open( tid, mdb->mi_dbis[MDB_ID2VAL], &mvc );
 288                                                 if (err)
 289                                                         goto mval_fail;
 290                                         }
 291                                         /* delete all values */
 292                                         anew = &a_dummy;
 293                                         anew->a_desc = mod->sm_desc;
 294                                         anew->a_numvals = 0;
 295                                         err = mdb_mval_del( op, mvc, e->e_id, anew );
 296                                         if (err)
 297                                                 goto mval_fail;
 298                                 }
 299                                 anew = attr_find( e->e_attrs, mod->sm_desc );
 300                                 if (mod->sm_numvals > mdb->mi_multi_hi) {
 301                                         anew->a_flags |= SLAP_ATTR_BIG_MULTI;
 302                                         if (!mvc) {
 303                                                 err = mdb_cursor_open( tid, mdb->mi_dbis[MDB_ID2VAL], &mvc );
 304                                                 if (err)
 305                                                         goto mval_fail;
 306                                         }
 307                                         err = mdb_mval_put(op, mvc, e->e_id, anew);
 308                                         if (err)
 309                                                 goto mval_fail;
 310                                 } else if (anew) {
 311                                         /* revert back to normal attr */
 312                                         anew->a_flags &= ~SLAP_ATTR_BIG_MULTI;
 313                                 }
 314                         }
 315                         break;
 316
 317                 case LDAP_MOD_INCREMENT:
 318                         Debug(LDAP_DEBUG_ARGS,
 319                                 "mdb_modify_internal: increment %s\n",
 320                                 mod->sm_desc->ad_cname.bv_val, 0, 0);
 321                         err = modify_increment_values( e, mod, get_permissiveModify(op),
 322                                 text, textbuf, textlen );
 323                         if( err != LDAP_SUCCESS ) {
 324                                 Debug(LDAP_DEBUG_ARGS,
 325                                         "mdb_modify_internal: %d %s\n",
 326                                         err, *text, 0);
 327                         } else {
 328                                 got_delete = 1;
 329                         }
 330                         break;
 331
 332                 case SLAP_MOD_SOFTADD:
 333                         Debug(LDAP_DEBUG_ARGS,
 334                                 "mdb_modify_internal: softadd %s\n",
 335                                 mod->sm_desc->ad_cname.bv_val, 0, 0);
 336                         /* Avoid problems in index_add_mods()
 337                          * We need to add index if necessary.
 338                          */
 339                         mod->sm_op = LDAP_MOD_ADD;
 340                         softop = 1;
 341                         chkpresent = 0;
 342                         goto do_add;
 343
 344                 case SLAP_MOD_SOFTDEL:
 345                         Debug(LDAP_DEBUG_ARGS,
 346                                 "mdb_modify_internal: softdel %s\n",
 347                                 mod->sm_desc->ad_cname.bv_val, 0, 0);
 348                         /* Avoid problems in index_delete_mods()
 349                          * We need to add index if necessary.
 350                          */
 351                         mod->sm_op = LDAP_MOD_DELETE;
 352                         softop = 1;
 353                         goto do_del;
 354
 355                 case SLAP_MOD_ADD_IF_NOT_PRESENT:
 356                         if ( attr_find( e->e_attrs, mod->sm_desc ) != NULL ) {
 357                                 /* skip */
 358                                 err = LDAP_SUCCESS;
 359                                 break;
 360                         }
 361
 362                         Debug(LDAP_DEBUG_ARGS,
 363                                 "mdb_modify_internal: add_if_not_present %s\n",
 364                                 mod->sm_desc->ad_cname.bv_val, 0, 0);
 365                         /* Avoid problems in index_add_mods()
 366                          * We need to add index if necessary.
 367                          */
 368                         mod->sm_op = LDAP_MOD_ADD;
 369                         softop = 0;
 370                         chkpresent = 1;
 371                         goto do_add;
 372
 373                 default:
 374                         Debug(LDAP_DEBUG_ANY, "mdb_modify_internal: invalid op %d\n",
 375                                 mod->sm_op, 0, 0);
 376                         *text = "Invalid modify operation";
 377                         err = LDAP_OTHER;
 378                         Debug(LDAP_DEBUG_ARGS, "mdb_modify_internal: %d %s\n",
 379                                 err, *text, 0);
 380                 }
 381
 382                 if ( err != LDAP_SUCCESS ) {
 383                         attrs_free( e->e_attrs );
 384                         e->e_attrs = save_attrs;
 385                         /* unlock entry, delete from cache */
 386                         return err;
 387                 }
 388
 389                 /* If objectClass was modified, reset the flags */
 390                 if ( mod->sm_desc == slap_schema.si_ad_objectClass ) {
 391                         e->e_ocflags = 0;
 392                 }
 393
 394                 if ( glue_attr_delete ) e->e_ocflags = 0;
 395
 396
 397                 /* check if modified attribute was indexed
 398                  * but not in case of NOOP... */
 399                 if ( !op->o_noop ) {
 400                         mdb_modify_idxflags( op, mod->sm_desc, got_delete, e->e_attrs, save_attrs );
 401                 }
 402         }
 403
 404         /* check that the entry still obeys the schema */
 405         ap = NULL;
 406         rc = entry_schema_check( op, e, save_attrs, get_relax(op), 0, &ap,
 407                 text, textbuf, textlen );
 408         if ( rc != LDAP_SUCCESS || op->o_noop ) {
 409                 attrs_free( e->e_attrs );
 410                 /* clear the indexing flags */
 411                 for ( ap = save_attrs; ap != NULL; ap = ap->a_next ) {
 412                         ap->a_flags &= ~(SLAP_ATTR_IXADD|SLAP_ATTR_IXDEL);
 413                 }
 414                 e->e_attrs = save_attrs;
 415
 416                 if ( rc != LDAP_SUCCESS ) {
 417                         Debug( LDAP_DEBUG_ANY,
 418                                 "entry failed schema check: %s\n",
 419                                 *text, 0, 0 );
 420                 }
 421
 422                 /* if NOOP then silently revert to saved attrs */
 423                 return rc;
 424         }
 425
 426         /* structuralObjectClass modified! */
 427         if ( ap ) {
 428                 assert( ap->a_desc == slap_schema.si_ad_structuralObjectClass );
 429                 if ( !op->o_noop ) {
 430                         mdb_modify_idxflags( op, slap_schema.si_ad_structuralObjectClass,
 431                                 1, e->e_attrs, save_attrs );
 432                 }
 433         }
 434
 435         /* update the indices of the modified attributes */
 436
 437         /* start with deleting the old index entries */
 438         for ( ap = save_attrs; ap != NULL; ap = ap->a_next ) {
 439                 if ( ap->a_flags & SLAP_ATTR_IXDEL ) {
 440                         struct berval *vals;
 441                         Attribute *a2;
 442                         ap->a_flags &= ~SLAP_ATTR_IXDEL;
 443                         a2 = attr_find( e->e_attrs, ap->a_desc );
 444                         if ( a2 ) {
 445                                 /* need to detect which values were deleted */
 446                                 int i, j;
 447                                 /* let add know there were deletes */
 448                                 if ( a2->a_flags & SLAP_ATTR_IXADD )
 449                                         a2->a_flags |= SLAP_ATTR_IXDEL;
 450                                 vals = op->o_tmpalloc( (ap->a_numvals + 1) *
 451                                         sizeof(struct berval), op->o_tmpmemctx );
 452                                 j = 0;
 453                                 for ( i=0; i < ap->a_numvals; i++ ) {
 454                                         rc = attr_valfind( a2, SLAP_MR_ASSERTED_VALUE_NORMALIZED_MATCH,
 455                                                 &ap->a_nvals[i], NULL, op->o_tmpmemctx );
 456                                         /* Save deleted values */
 457                                         if ( rc == LDAP_NO_SUCH_ATTRIBUTE )
 458                                                 vals[j++] = ap->a_nvals[i];
 459                                 }
 460                                 BER_BVZERO(vals+j);
 461                         } else {
 462                                 /* attribute was completely deleted */
 463                                 vals = ap->a_nvals;
 464                         }
 465                         rc = 0;
 466                         if ( !BER_BVISNULL( vals )) {
 467                                 rc = mdb_index_values( op, tid, ap->a_desc,
 468                                         vals, e->e_id, SLAP_INDEX_DELETE_OP );
 469                                 if ( rc != LDAP_SUCCESS ) {
 470                                         Debug( LDAP_DEBUG_ANY,
 471                                                 "%s: attribute \"%s\" index delete failure\n",
 472                                                 op->o_log_prefix, ap->a_desc->ad_cname.bv_val, 0 );
 473                                         attrs_free( e->e_attrs );
 474                                         e->e_attrs = save_attrs;
 475                                 }
 476                         }
 477                         if ( vals != ap->a_nvals )
 478                                 op->o_tmpfree( vals, op->o_tmpmemctx );
 479                         if ( rc ) return rc;
 480                 }
 481         }
 482
 483         /* add the new index entries */
 484         for ( ap = e->e_attrs; ap != NULL; ap = ap->a_next ) {
 485                 if (ap->a_flags & SLAP_ATTR_IXADD) {
 486                         ap->a_flags &= ~SLAP_ATTR_IXADD;
 487                         if ( ap->a_flags & SLAP_ATTR_IXDEL ) {
 488                                 /* if any values were deleted, we must readd index
 489                                  * for all remaining values.
 490                                  */
 491                                 ap->a_flags &= ~SLAP_ATTR_IXDEL;
 492                                 rc = mdb_index_values( op, tid, ap->a_desc,
 493                                         ap->a_nvals,
 494                                         e->e_id, SLAP_INDEX_ADD_OP );
 495                         } else {
 496                                 int found = 0;
 497                                 /* if this was only an add, we only need to index
 498                                  * the added values.
 499                                  */
 500                                 for ( ml = modlist; ml != NULL; ml = ml->sml_next ) {
 501                                         struct berval *vals;
 502                                         if ( ml->sml_desc != ap->a_desc || !ml->sml_numvals )
 503                                                 continue;
 504                                         found = 1;
 505                                         switch( ml->sml_op ) {
 506                                         case LDAP_MOD_ADD:
 507                                         case LDAP_MOD_REPLACE:
 508                                         case LDAP_MOD_INCREMENT:
 509                                         case SLAP_MOD_SOFTADD:
 510                                         case SLAP_MOD_ADD_IF_NOT_PRESENT:
 511                                                 if ( ml->sml_op == LDAP_MOD_INCREMENT )
 512                                                         vals = ap->a_nvals;
 513                                                 else if ( ml->sml_nvalues )
 514                                                         vals = ml->sml_nvalues;
 515                                                 else
 516                                                         vals = ml->sml_values;
 517                                                 rc = mdb_index_values( op, tid, ap->a_desc,
 518                                                         vals, e->e_id, SLAP_INDEX_ADD_OP );
 519                                                 break;
 520                                         }
 521                                         if ( rc )
 522                                                 break;
 523                                 }
 524                                 /* This attr was affected by a modify of a subtype, so
 525                                  * there was no direct match in the modlist. Just readd
 526                                  * all of its values.
 527                                  */
 528                                 if ( !found ) {
 529                                         rc = mdb_index_values( op, tid, ap->a_desc,
 530                                                 ap->a_nvals,
 531                                                 e->e_id, SLAP_INDEX_ADD_OP );
 532                                 }
 533                         }
 534                         if ( rc != LDAP_SUCCESS ) {
 535                                 Debug( LDAP_DEBUG_ANY,
 536                                        "%s: attribute \"%s\" index add failure\n",
 537                                         op->o_log_prefix, ap->a_desc->ad_cname.bv_val, 0 );
 538                                 attrs_free( e->e_attrs );
 539                                 e->e_attrs = save_attrs;
 540                                 return rc;
 541                         }
 542                 }
 543         }
 544
 545         return rc;
 546 }
 547
 548
 549 int
 550 mdb_modify( Operation *op, SlapReply *rs )
 551 {
 552         struct mdb_info *mdb = (struct mdb_info *) op->o_bd->be_private;
 553         Entry           *e = NULL;
 554         int             manageDSAit = get_manageDSAit( op );
 555         char textbuf[SLAP_TEXT_BUFLEN];
 556         size_t textlen = sizeof textbuf;
 557         MDB_txn *txn = NULL;
 558         mdb_op_info opinfo = {{{ 0 }}}, *moi = &opinfo;
 559         Entry           dummy = {0};
 560
 561         LDAPControl **preread_ctrl = NULL;
 562         LDAPControl **postread_ctrl = NULL;
 563         LDAPControl *ctrls[SLAP_MAX_RESPONSE_CONTROLS];
 564         int num_ctrls = 0;
 565         int numads = mdb->mi_numads;
 566
 567         Debug( LDAP_DEBUG_ARGS, LDAP_XSTRING(mdb_modify) ": %s\n",
 568                 op->o_req_dn.bv_val, 0, 0 );
 569
 570 #ifdef LDAP_X_TXN
 571         if( op->o_txnSpec && txn_preop( op, rs ))
 572                 return rs->sr_err;
 573 #endif
 574
 575         ctrls[num_ctrls] = NULL;
 576
 577         /* begin transaction */
 578         rs->sr_err = mdb_opinfo_get( op, mdb, 0, &moi );
 579         rs->sr_text = NULL;
 580         if( rs->sr_err != 0 ) {
 581                 Debug( LDAP_DEBUG_TRACE,
 582                         LDAP_XSTRING(mdb_modify) ": txn_begin failed: "
 583                         "%s (%d)\n", mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 584                 rs->sr_err = LDAP_OTHER;
 585                 rs->sr_text = "internal error";
 586                 goto return_results;
 587         }
 588         txn = moi->moi_txn;
 589
 590         /* Don't touch the opattrs, if this is a contextCSN update
 591          * initiated from updatedn */
 592         if ( !be_isupdate(op) || !op->orm_modlist || op->orm_modlist->sml_next ||
 593                  op->orm_modlist->sml_desc != slap_schema.si_ad_contextCSN ) {
 594
 595                 slap_mods_opattrs( op, &op->orm_modlist, 1 );
 596         }
 597
 598         /* get entry or ancestor */
 599         rs->sr_err = mdb_dn2entry( op, txn, NULL, &op->o_req_ndn, &e, NULL, 1 );
 600
 601         if ( rs->sr_err != 0 ) {
 602                 Debug( LDAP_DEBUG_TRACE,
 603                         LDAP_XSTRING(mdb_modify) ": dn2entry failed (%d)\n",
 604                         rs->sr_err, 0, 0 );
 605                 switch( rs->sr_err ) {
 606                 case MDB_NOTFOUND:
 607                         break;
 608                 case LDAP_BUSY:
 609                         rs->sr_text = "ldap server busy";
 610                         goto return_results;
 611                 default:
 612                         rs->sr_err = LDAP_OTHER;
 613                         rs->sr_text = "internal error";
 614                         goto return_results;
 615                 }
 616         }
 617
 618         /* acquire and lock entry */
 619         /* FIXME: dn2entry() should return non-glue entry */
 620         if (( rs->sr_err == MDB_NOTFOUND ) ||
 621                 ( !manageDSAit && e && is_entry_glue( e )))
 622         {
 623                 if ( e != NULL ) {
 624                         rs->sr_matched = ch_strdup( e->e_dn );
 625                         if ( is_entry_referral( e )) {
 626                                 BerVarray ref = get_entry_referrals( op, e );
 627                                 rs->sr_ref = referral_rewrite( ref, &e->e_name,
 628                                         &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 629                                 ber_bvarray_free( ref );
 630                         } else {
 631                                 rs->sr_ref = NULL;
 632                         }
 633                         mdb_entry_return( op, e );
 634                         e = NULL;
 635
 636                 } else {
 637                         rs->sr_ref = referral_rewrite( default_referral, NULL,
 638                                 &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 639                 }
 640
 641                 rs->sr_flags = REP_MATCHED_MUSTBEFREED | REP_REF_MUSTBEFREED;
 642                 rs->sr_err = LDAP_REFERRAL;
 643                 send_ldap_result( op, rs );
 644                 goto done;
 645         }
 646
 647         if ( !manageDSAit && is_entry_referral( e ) ) {
 648                 /* entry is a referral, don't allow modify */
 649                 rs->sr_ref = get_entry_referrals( op, e );
 650
 651                 Debug( LDAP_DEBUG_TRACE,
 652                         LDAP_XSTRING(mdb_modify) ": entry is referral\n",
 653                         0, 0, 0 );
 654
 655                 rs->sr_err = LDAP_REFERRAL;
 656                 rs->sr_matched = e->e_name.bv_val;
 657                 rs->sr_flags = REP_REF_MUSTBEFREED;
 658                 send_ldap_result( op, rs );
 659                 rs->sr_matched = NULL;
 660                 goto done;
 661         }
 662
 663         if ( get_assert( op ) &&
 664                 ( test_filter( op, e, get_assertion( op )) != LDAP_COMPARE_TRUE ))
 665         {
 666                 rs->sr_err = LDAP_ASSERTION_FAILED;
 667                 goto return_results;
 668         }
 669
 670         if( op->o_preread ) {
 671                 if( preread_ctrl == NULL ) {
 672                         preread_ctrl = &ctrls[num_ctrls++];
 673                         ctrls[num_ctrls] = NULL;
 674                 }
 675                 if ( slap_read_controls( op, rs, e,
 676                         &slap_pre_read_bv, preread_ctrl ) )
 677                 {
 678                         Debug( LDAP_DEBUG_TRACE,
 679                                 "<=- " LDAP_XSTRING(mdb_modify) ": pre-read "
 680                                 "failed!\n", 0, 0, 0 );
 681                         if ( op->o_preread & SLAP_CONTROL_CRITICAL ) {
 682                                 /* FIXME: is it correct to abort
 683                                  * operation if control fails? */
 684                                 goto return_results;
 685                         }
 686                 }
 687         }
 688
 689         /* Modify the entry */
 690         dummy = *e;
 691         rs->sr_err = mdb_modify_internal( op, txn, op->orm_modlist,
 692                 &dummy, &rs->sr_text, textbuf, textlen );
 693
 694         if( rs->sr_err != LDAP_SUCCESS ) {
 695                 Debug( LDAP_DEBUG_TRACE,
 696                         LDAP_XSTRING(mdb_modify) ": modify failed (%d)\n",
 697                         rs->sr_err, 0, 0 );
 698                 /* Only free attrs if they were dup'd.  */
 699                 if ( dummy.e_attrs == e->e_attrs ) dummy.e_attrs = NULL;
 700                 goto return_results;
 701         }
 702
 703         /* change the entry itself */
 704         rs->sr_err = mdb_id2entry_update( op, txn, NULL, &dummy );
 705         if ( rs->sr_err != 0 ) {
 706                 Debug( LDAP_DEBUG_TRACE,
 707                         LDAP_XSTRING(mdb_modify) ": id2entry update failed " "(%d)\n",
 708                         rs->sr_err, 0, 0 );
 709                 if ( rs->sr_err == LDAP_ADMINLIMIT_EXCEEDED ) {
 710                         rs->sr_text = "entry too big";
 711                 } else {
 712                         rs->sr_err = LDAP_OTHER;
 713                         rs->sr_text = "entry update failed";
 714                 }
 715                 goto return_results;
 716         }
 717
 718         if( op->o_postread ) {
 719                 if( postread_ctrl == NULL ) {
 720                         postread_ctrl = &ctrls[num_ctrls++];
 721                         ctrls[num_ctrls] = NULL;
 722                 }
 723                 if( slap_read_controls( op, rs, &dummy,
 724                         &slap_post_read_bv, postread_ctrl ) )
 725                 {
 726                         Debug( LDAP_DEBUG_TRACE,
 727                                 "<=- " LDAP_XSTRING(mdb_modify)
 728                                 ": post-read failed!\n", 0, 0, 0 );
 729                         if ( op->o_postread & SLAP_CONTROL_CRITICAL ) {
 730                                 /* FIXME: is it correct to abort
 731                                  * operation if control fails? */
 732                                 goto return_results;
 733                         }
 734                 }
 735         }
 736
 737         /* Only free attrs if they were dup'd.  */
 738         if ( dummy.e_attrs == e->e_attrs ) dummy.e_attrs = NULL;
 739         if( moi == &opinfo ) {
 740                 LDAP_SLIST_REMOVE( &op->o_extra, &opinfo.moi_oe, OpExtra, oe_next );
 741                 opinfo.moi_oe.oe_key = NULL;
 742                 if( op->o_noop ) {
 743                         mdb->mi_numads = numads;
 744                         mdb_txn_abort( txn );
 745                         rs->sr_err = LDAP_X_NO_OPERATION;
 746                         txn = NULL;
 747                         goto return_results;
 748                 } else {
 749                         rs->sr_err = mdb_txn_commit( txn );
 750                         if ( rs->sr_err )
 751                                 mdb->mi_numads = numads;
 752                         txn = NULL;
 753                 }
 754         }
 755
 756         if( rs->sr_err != 0 ) {
 757                 Debug( LDAP_DEBUG_ANY,
 758                         LDAP_XSTRING(mdb_modify) ": txn_%s failed: %s (%d)\n",
 759                         op->o_noop ? "abort (no-op)" : "commit",
 760                         mdb_strerror(rs->sr_err), rs->sr_err );
 761                 rs->sr_err = LDAP_OTHER;
 762                 rs->sr_text = "commit failed";
 763
 764                 goto return_results;
 765         }
 766
 767         Debug( LDAP_DEBUG_TRACE,
 768                 LDAP_XSTRING(mdb_modify) ": updated%s id=%08lx dn=\"%s\"\n",
 769                 op->o_noop ? " (no-op)" : "",
 770                 dummy.e_id, op->o_req_dn.bv_val );
 771
 772         rs->sr_err = LDAP_SUCCESS;
 773         rs->sr_text = NULL;
 774         if( num_ctrls ) rs->sr_ctrls = ctrls;
 775
 776 return_results:
 777         if( dummy.e_attrs ) {
 778                 attrs_free( dummy.e_attrs );
 779         }
 780         send_ldap_result( op, rs );
 781
 782 #if 0
 783         if( rs->sr_err == LDAP_SUCCESS && mdb->bi_txn_cp_kbyte ) {
 784                 TXN_CHECKPOINT( mdb->bi_dbenv,
 785                         mdb->bi_txn_cp_kbyte, mdb->bi_txn_cp_min, 0 );
 786         }
 787 #endif
 788
 789 done:
 790         slap_graduate_commit_csn( op );
 791
 792         if( moi == &opinfo ) {
 793                 if( txn != NULL ) {
 794                         mdb->mi_numads = numads;
 795                         mdb_txn_abort( txn );
 796                 }
 797                 if ( opinfo.moi_oe.oe_key ) {
 798                         LDAP_SLIST_REMOVE( &op->o_extra, &opinfo.moi_oe, OpExtra, oe_next );
 799                 }
 800         } else {
 801                 moi->moi_ref--;
 802         }
 803
 804         if( e != NULL ) {
 805                 mdb_entry_return( op, e );
 806         }
 807
 808         if( preread_ctrl != NULL && (*preread_ctrl) != NULL ) {
 809                 slap_sl_free( (*preread_ctrl)->ldctl_value.bv_val, op->o_tmpmemctx );
 810                 slap_sl_free( *preread_ctrl, op->o_tmpmemctx );
 811         }
 812         if( postread_ctrl != NULL && (*postread_ctrl) != NULL ) {
 813                 slap_sl_free( (*postread_ctrl)->ldctl_value.bv_val, op->o_tmpmemctx );
 814                 slap_sl_free( *postread_ctrl, op->o_tmpmemctx );
 815         }
 816
 817         rs->sr_text = NULL;
 818
 819         return rs->sr_err;
 820 }