/** BEGIN COPYRIGHT BLOCK
* This Program is free software; you can redistribute it and/or modify it under
* the terms of the GNU General Public License as published by the Free Software
* Foundation; version 2 of the License.
*
* This Program is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
* FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along with
* this Program; if not, write to the Free Software Foundation, Inc., 59 Temple
* Place, Suite 330, Boston, MA 02111-1307 USA.
*
* In addition, as a special exception, Red Hat, Inc. gives You the additional
* right to link the code of this Program with code not covered under the GNU
* General Public License ("Non-GPL Code") and to distribute linked combinations
* including the two, subject to the limitations in this paragraph. Non-GPL Code
* permitted under this exception must only link to the code of this Program
* through those well defined interfaces identified in the file named EXCEPTION
* found in the source code files (the "Approved Interfaces"). The files of
* Non-GPL Code may instantiate templates or use macros or inline functions from
* the Approved Interfaces without causing the resulting work to be covered by
* the GNU General Public License. Only Red Hat, Inc. may make changes or
* additions to the list of Approved Interfaces. You must obey the GNU General
* Public License in all respects for all of the Program code and other code used
* in conjunction with the Program except the Non-GPL Code covered by this
* exception. If you modify this file, you may extend this exception to your
* version of the file, but you are not obligated to do so. If you do not wish to
* provide this exception without modification, you must delete this exception
* statement from your version and license this file solely under the GPL without
* exception.
*
*
* Copyright (C) 2001 Sun Microsystems, Inc. Used by permission.
* Copyright (C) 2005 Red Hat, Inc.
* All rights reserved.
* END COPYRIGHT BLOCK **/
#ifdef HAVE_CONFIG_H
# include <config.h>
#endif
#include "cb.h"
static void cb_remove_illegal_mods(cb_backend_instance * inst, LDAPMod **mods);
/*
* Perform a modify operation
*
* Returns:
* 0 - success
* <0 - fail
*
*/
int
chaining_back_modify ( Slapi_PBlock *pb )
{
Slapi_Backend *be;
cb_backend_instance *cb;
LDAPControl **ctrls, **serverctrls;
int rc,parse_rc,msgid,i;
LDAP *ld=NULL;
char **referrals=NULL;
LDAPMod ** mods;
LDAPMessage * res;
char *dn,* matched_msg, *error_msg;
char *cnxerrbuf=NULL;
time_t endtime;
cb_outgoing_conn *cnx;
if ( LDAP_SUCCESS != (rc=cb_forward_operation(pb) )) {
cb_send_ldap_result( pb, rc, NULL, "Chaining forbidden", 0, NULL );
return -1;
}
slapi_pblock_get( pb, SLAPI_BACKEND, &be );
cb = cb_get_instance(be);
cb_update_monitor_info(pb,cb,SLAPI_OPERATION_MODIFY);
/* Check wether the chaining BE is available or not */
if ( cb_check_availability( cb, pb ) == FARMSERVER_UNAVAILABLE ){
return -1;
}
slapi_pblock_get( pb, SLAPI_MODIFY_TARGET, &dn );
if (cb_debug_on()) {
slapi_log_error( SLAPI_LOG_PLUGIN, CB_PLUGIN_SUBSYSTEM,"modify: target:<%s>\n",dn);
}
ctrls=serverctrls=NULL;
slapi_pblock_get( pb, SLAPI_MODIFY_MODS, &mods );
slapi_pblock_get( pb, SLAPI_REQCONTROLS, &ctrls );
/* Check acls */
if ( cb->local_acl && !cb->associated_be_is_disabled ) {
char * errbuf=NULL;
Slapi_Entry *te = slapi_entry_alloc();
slapi_entry_set_dn(te,slapi_ch_strdup(dn));
rc = slapi_acl_check_mods( pb, te, mods, &errbuf);
slapi_entry_free(te);
if ( rc != LDAP_SUCCESS ) {
cb_send_ldap_result( pb, rc, NULL, errbuf, 0, NULL );
slapi_ch_free((void **)&errbuf);
return -1;
}
}
/* Grab a connection handle */
if ((rc = cb_get_connection(cb->pool,&ld,&cnx,NULL,&cnxerrbuf)) != LDAP_SUCCESS) {
cb_send_ldap_result( pb, LDAP_OPERATIONS_ERROR, NULL, cnxerrbuf, 0, NULL);
if (cnxerrbuf) {
PR_smprintf_free(cnxerrbuf);
}
/* ping the farm. If the farm is unreachable, we increment the counter */
cb_ping_farm(cb,NULL,0);
return -1;
}
/* Control management */
if ( (rc = cb_update_controls( pb,ld,&ctrls,CB_UPDATE_CONTROLS_ADDAUTH )) != LDAP_SUCCESS ) {
cb_send_ldap_result( pb, rc, NULL,NULL, 0, NULL);
cb_release_op_connection(cb->pool,ld,CB_LDAP_CONN_ERROR(rc));
/* Don't free mods here: are freed at the do_modify level */
return -1;
}
if ( slapi_op_abandoned( pb )) {
cb_release_op_connection(cb->pool,ld,0);
/* Don't free mods here: are freed at the do_modify level */
if ( NULL != ctrls)
ldap_controls_free(ctrls);
return -1;
}
/* Remove illegal attributes from the mods */
cb_remove_illegal_mods(cb,mods);
/* heart-beat management */
if (cb->max_idle_time>0)
endtime=current_time() + cb->max_idle_time;
/* Send LDAP operation to the remote host */
rc = ldap_modify_ext( ld, dn, mods, ctrls, NULL, &msgid );
if ( NULL != ctrls)
ldap_controls_free(ctrls);
if ( rc != LDAP_SUCCESS ) {
cb_send_ldap_result( pb, LDAP_OPERATIONS_ERROR, NULL, ldap_err2string(rc), 0, NULL);
cb_release_op_connection(cb->pool,ld,CB_LDAP_CONN_ERROR(rc));
return -1;
}
while ( 1 ) {
if (cb_check_forward_abandon(cb,pb,ld,msgid)) {
/* connection handle released */
return -1;
}
rc = ldap_result( ld, msgid, 0, &cb->abandon_timeout, &res );
switch ( rc ) {
case -1:
cb_send_ldap_result( pb, LDAP_OPERATIONS_ERROR, NULL,
ldap_err2string(rc), 0, NULL);
cb_release_op_connection(cb->pool,ld,CB_LDAP_CONN_ERROR(rc));
if (res)
ldap_msgfree(res);
return -1;
case 0:
if ((rc=cb_ping_farm(cb,cnx,endtime)) != LDAP_SUCCESS) {
/* does not respond. give up and return a*/
/* error to the client. */
/*cb_send_ldap_result(pb,LDAP_OPERATIONS_ERROR, NULL,
ldap_err2string(rc), 0, NULL);*/
cb_send_ldap_result(pb,LDAP_OPERATIONS_ERROR, NULL, "FARM SERVER TEMPORARY UNAVAILABLE", 0, NULL);
cb_release_op_connection(cb->pool,ld,CB_LDAP_CONN_ERROR(rc));
if (res)
ldap_msgfree(res);
return -1;
}
#ifdef CB_YIELD
DS_Sleep(PR_INTERVAL_NO_WAIT);
#endif
break;
default:
matched_msg=error_msg=NULL;
serverctrls=NULL;
parse_rc = ldap_parse_result( ld, res, &rc, &matched_msg,
&error_msg, &referrals, &serverctrls, 1 );
if ( parse_rc != LDAP_SUCCESS ) {
cb_send_ldap_result( pb, LDAP_OPERATIONS_ERROR, NULL,
ldap_err2string(parse_rc), 0, NULL);
cb_release_op_connection(cb->pool,ld,CB_LDAP_CONN_ERROR(parse_rc));
slapi_ch_free((void **)&matched_msg);
slapi_ch_free((void **)&error_msg);
if (serverctrls)
ldap_controls_free(serverctrls);
/* jarnou: free referrals */
if (referrals)
charray_free(referrals);
return -1;
}
if ( rc != LDAP_SUCCESS ) {
struct berval ** refs = referrals2berval(referrals);
cb_send_ldap_result( pb, rc, matched_msg, error_msg, 0, refs);
cb_release_op_connection(cb->pool,ld,CB_LDAP_CONN_ERROR(rc));
slapi_ch_free((void **)&matched_msg);
slapi_ch_free((void **)&error_msg);
if (refs)
ber_bvecfree(refs);
if (referrals)
charray_free(referrals);
if (serverctrls)
ldap_controls_free(serverctrls);
return -1;
}
cb_release_op_connection(cb->pool,ld,0);
/* Add control response sent by the farm server */
for (i=0; serverctrls && serverctrls[i];i++)
slapi_pblock_set( pb, SLAPI_ADD_RESCONTROL, serverctrls[i]);
/* SLAPI_ADD_RESCONTROL dups controls */
if (serverctrls)
ldap_controls_free(serverctrls);
/* jarnou: free matched_msg, error_msg, and referrals if necessary */
slapi_ch_free((void **)&matched_msg);
slapi_ch_free((void **)&error_msg);
if (referrals)
charray_free(referrals);
cb_send_ldap_result( pb, LDAP_SUCCESS, NULL, NULL, 0, NULL );
return 0;
}
}
/* Never reached */
/* return 0; */
}
/* Function removes mods which are not allowed over-the-wire */
static void
cb_remove_illegal_mods(cb_backend_instance *inst, LDAPMod **mods)
{
int i, j;
LDAPMod *tmp;
if ( inst->illegal_attributes != NULL ) { /* Unlikely to happen */
PR_RWLock_Wlock(inst->rwl_config_lock);
for (j=0; inst->illegal_attributes[j]; j++) {
for ( i = 0; mods[i] != NULL; i++ ) {
if (slapi_attr_types_equivalent(inst->illegal_attributes[j],mods[i]->mod_type)) {
tmp = mods[i];
for ( j = i; mods[j] != NULL; j++ ) {
mods[j] = mods[j + 1];
}
slapi_ch_free( (void**)&(tmp->mod_type) );
if ( tmp->mod_bvalues != NULL ) {
ber_bvecfree( tmp->mod_bvalues );
}
slapi_ch_free( (void**)&tmp );
i--;
}
}
}
PR_RWLock_Unlock(inst->rwl_config_lock);
}
}