4 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2006
5 Copyright (C) Stefan Metzmacher <metze@samba.org> 2007
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 * Component: ldb partitions module
26 * Description: Implement LDAP partitions
28 * Author: Andrew Bartlett
29 * Author: Stefan Metzmacher
32 #include "dsdb/samdb/ldb_modules/partition.h"
35 struct ldb_module
*module
;
36 struct ldb_request
*req
;
39 struct partition_context
{
40 struct ldb_module
*module
;
41 struct ldb_request
*req
;
43 struct part_request
*part_req
;
44 unsigned int num_requests
;
45 unsigned int finished_requests
;
47 const char **referrals
;
50 static struct partition_context
*partition_init_ctx(struct ldb_module
*module
, struct ldb_request
*req
)
52 struct partition_context
*ac
;
54 ac
= talloc_zero(req
, struct partition_context
);
56 ldb_set_errstring(ldb_module_get_ctx(module
), "Out of Memory");
67 * helper functions to call the next module in chain
69 int partition_request(struct ldb_module
*module
, struct ldb_request
*request
)
71 if ((module
&& ldb_module_flags(ldb_module_get_ctx(module
)) & LDB_FLG_ENABLE_TRACING
)) { \
72 const struct dsdb_control_current_partition
*partition
= NULL
;
73 struct ldb_control
*partition_ctrl
= ldb_request_get_control(request
, DSDB_CONTROL_CURRENT_PARTITION_OID
);
75 partition
= talloc_get_type(partition_ctrl
->data
,
76 struct dsdb_control_current_partition
);
79 if (partition
!= NULL
) {
80 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_request() -> %s",
81 ldb_dn_get_linearized(partition
->dn
));
83 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_request() -> (metadata partition)");
87 return ldb_next_request(module
, request
);
90 static struct dsdb_partition
*find_partition(struct partition_private_data
*data
,
92 struct ldb_request
*req
)
95 struct ldb_control
*partition_ctrl
;
97 /* see if the request has the partition DN specified in a
98 * control. The repl_meta_data module can specify this to
99 * ensure that replication happens to the right partition
101 partition_ctrl
= ldb_request_get_control(req
, DSDB_CONTROL_CURRENT_PARTITION_OID
);
102 if (partition_ctrl
) {
103 const struct dsdb_control_current_partition
*partition
;
104 partition
= talloc_get_type(partition_ctrl
->data
,
105 struct dsdb_control_current_partition
);
106 if (partition
!= NULL
) {
115 /* Look at base DN */
116 /* Figure out which partition it is under */
117 /* Skip the lot if 'data' isn't here yet (initialisation) */
118 for (i
=0; data
&& data
->partitions
&& data
->partitions
[i
]; i
++) {
119 if (ldb_dn_compare_base(data
->partitions
[i
]->ctrl
->dn
, dn
) == 0) {
120 return data
->partitions
[i
];
128 * fire the caller's callback for every entry, but only send 'done' once.
130 static int partition_req_callback(struct ldb_request
*req
,
131 struct ldb_reply
*ares
)
133 struct partition_context
*ac
;
134 struct ldb_module
*module
;
135 struct ldb_request
*nreq
;
137 struct ldb_control
*partition_ctrl
;
139 ac
= talloc_get_type(req
->context
, struct partition_context
);
142 return ldb_module_done(ac
->req
, NULL
, NULL
,
143 LDB_ERR_OPERATIONS_ERROR
);
146 partition_ctrl
= ldb_request_get_control(req
, DSDB_CONTROL_CURRENT_PARTITION_OID
);
147 if (partition_ctrl
&& (ac
->num_requests
== 1 || ares
->type
== LDB_REPLY_ENTRY
)) {
148 /* If we didn't fan this request out to mulitple partitions,
149 * or this is an individual search result, we can
150 * deterministically tell the caller what partition this was
151 * written to (repl_meta_data likes to know) */
152 ret
= ldb_reply_add_control(ares
,
153 DSDB_CONTROL_CURRENT_PARTITION_OID
,
154 false, partition_ctrl
->data
);
155 if (ret
!= LDB_SUCCESS
) {
156 return ldb_module_done(ac
->req
, NULL
, NULL
,
161 if (ares
->error
!= LDB_SUCCESS
) {
162 return ldb_module_done(ac
->req
, ares
->controls
,
163 ares
->response
, ares
->error
);
166 switch (ares
->type
) {
167 case LDB_REPLY_REFERRAL
:
168 return ldb_module_send_referral(ac
->req
, ares
->referral
);
170 case LDB_REPLY_ENTRY
:
171 if (ac
->req
->operation
!= LDB_SEARCH
) {
172 ldb_set_errstring(ldb_module_get_ctx(ac
->module
),
173 "partition_req_callback:"
174 " Unsupported reply type for this request");
175 return ldb_module_done(ac
->req
, NULL
, NULL
,
176 LDB_ERR_OPERATIONS_ERROR
);
179 return ldb_module_send_entry(ac
->req
, ares
->message
, ares
->controls
);
182 if (ac
->req
->operation
== LDB_EXTENDED
) {
183 /* FIXME: check for ares->response, replmd does not fill it ! */
184 if (ares
->response
) {
185 if (strcmp(ares
->response
->oid
, LDB_EXTENDED_START_TLS_OID
) != 0) {
186 ldb_set_errstring(ldb_module_get_ctx(ac
->module
),
187 "partition_req_callback:"
188 " Unknown extended reply, "
189 "only supports START_TLS");
191 return ldb_module_done(ac
->req
, NULL
, NULL
,
192 LDB_ERR_OPERATIONS_ERROR
);
197 ac
->finished_requests
++;
198 if (ac
->finished_requests
== ac
->num_requests
) {
199 /* Send back referrals if they do exist (search ops) */
200 if (ac
->referrals
!= NULL
) {
202 for (ref
= ac
->referrals
; *ref
!= NULL
; ++ref
) {
203 ret
= ldb_module_send_referral(ac
->req
,
204 talloc_strdup(ac
->req
, *ref
));
205 if (ret
!= LDB_SUCCESS
) {
206 return ldb_module_done(ac
->req
, NULL
, NULL
,
212 /* this was the last one, call callback */
213 return ldb_module_done(ac
->req
, ares
->controls
,
218 /* not the last, now call the next one */
219 module
= ac
->part_req
[ac
->finished_requests
].module
;
220 nreq
= ac
->part_req
[ac
->finished_requests
].req
;
222 ret
= partition_request(module
, nreq
);
223 if (ret
!= LDB_SUCCESS
) {
225 return ldb_module_done(ac
->req
, NULL
, NULL
, ret
);
235 static int partition_prep_request(struct partition_context
*ac
,
236 struct dsdb_partition
*partition
)
239 struct ldb_request
*req
;
240 struct ldb_control
*partition_ctrl
= NULL
;
242 ac
->part_req
= talloc_realloc(ac
, ac
->part_req
,
244 ac
->num_requests
+ 1);
245 if (ac
->part_req
== NULL
) {
246 return ldb_oom(ldb_module_get_ctx(ac
->module
));
249 switch (ac
->req
->operation
) {
251 ret
= ldb_build_search_req_ex(&req
, ldb_module_get_ctx(ac
->module
),
253 ac
->req
->op
.search
.base
,
254 ac
->req
->op
.search
.scope
,
255 ac
->req
->op
.search
.tree
,
256 ac
->req
->op
.search
.attrs
,
258 ac
, partition_req_callback
,
260 LDB_REQ_SET_LOCATION(req
);
263 ret
= ldb_build_add_req(&req
, ldb_module_get_ctx(ac
->module
), ac
->part_req
,
264 ac
->req
->op
.add
.message
,
266 ac
, partition_req_callback
,
268 LDB_REQ_SET_LOCATION(req
);
271 ret
= ldb_build_mod_req(&req
, ldb_module_get_ctx(ac
->module
), ac
->part_req
,
272 ac
->req
->op
.mod
.message
,
274 ac
, partition_req_callback
,
276 LDB_REQ_SET_LOCATION(req
);
279 ret
= ldb_build_del_req(&req
, ldb_module_get_ctx(ac
->module
), ac
->part_req
,
282 ac
, partition_req_callback
,
284 LDB_REQ_SET_LOCATION(req
);
287 ret
= ldb_build_rename_req(&req
, ldb_module_get_ctx(ac
->module
), ac
->part_req
,
288 ac
->req
->op
.rename
.olddn
,
289 ac
->req
->op
.rename
.newdn
,
291 ac
, partition_req_callback
,
293 LDB_REQ_SET_LOCATION(req
);
296 ret
= ldb_build_extended_req(&req
, ldb_module_get_ctx(ac
->module
),
298 ac
->req
->op
.extended
.oid
,
299 ac
->req
->op
.extended
.data
,
301 ac
, partition_req_callback
,
303 LDB_REQ_SET_LOCATION(req
);
306 ldb_set_errstring(ldb_module_get_ctx(ac
->module
),
307 "Unsupported request type!");
308 ret
= LDB_ERR_UNWILLING_TO_PERFORM
;
311 if (ret
!= LDB_SUCCESS
) {
315 ac
->part_req
[ac
->num_requests
].req
= req
;
317 if (ac
->req
->controls
) {
318 /* Duplicate everything beside the current partition control */
319 partition_ctrl
= ldb_request_get_control(ac
->req
,
320 DSDB_CONTROL_CURRENT_PARTITION_OID
);
321 if (!ldb_save_controls(partition_ctrl
, req
, NULL
)) {
322 return ldb_module_oom(ac
->module
);
327 void *part_data
= partition
->ctrl
;
329 ac
->part_req
[ac
->num_requests
].module
= partition
->module
;
331 if (partition_ctrl
!= NULL
) {
332 if (partition_ctrl
->data
!= NULL
) {
333 part_data
= partition_ctrl
->data
;
337 * If the provided current partition control is without
338 * data then use the calculated one.
340 ret
= ldb_request_add_control(req
,
341 DSDB_CONTROL_CURRENT_PARTITION_OID
,
343 if (ret
!= LDB_SUCCESS
) {
348 if (req
->operation
== LDB_SEARCH
) {
349 /* If the search is for 'more' than this partition,
350 * then change the basedn, so a remote LDAP server
352 if (ldb_dn_compare_base(partition
->ctrl
->dn
,
353 req
->op
.search
.base
) != 0) {
354 req
->op
.search
.base
= partition
->ctrl
->dn
;
359 /* make sure you put the module here, or
360 * or ldb_next_request() will skip a module */
361 ac
->part_req
[ac
->num_requests
].module
= ac
->module
;
369 static int partition_call_first(struct partition_context
*ac
)
371 return partition_request(ac
->part_req
[0].module
, ac
->part_req
[0].req
);
375 * Send a request down to all the partitions
377 static int partition_send_all(struct ldb_module
*module
,
378 struct partition_context
*ac
,
379 struct ldb_request
*req
)
382 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
383 struct partition_private_data
);
384 int ret
= partition_prep_request(ac
, NULL
);
385 if (ret
!= LDB_SUCCESS
) {
388 for (i
=0; data
&& data
->partitions
&& data
->partitions
[i
]; i
++) {
389 ret
= partition_prep_request(ac
, data
->partitions
[i
]);
390 if (ret
!= LDB_SUCCESS
) {
395 /* fire the first one */
396 return partition_call_first(ac
);
401 * send an operation to the top partition, then copy the resulting
402 * object to all other partitions
404 static int partition_copy_all(struct ldb_module
*module
,
405 struct partition_context
*ac
,
406 struct ldb_request
*req
,
410 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
411 struct partition_private_data
);
413 struct ldb_result
*res
;
415 /* do the request on the top level sam.ldb synchronously */
416 ret
= ldb_next_request(module
, req
);
417 if (ret
!= LDB_SUCCESS
) {
420 ret
= ldb_wait(req
->handle
, LDB_WAIT_ALL
);
421 if (ret
!= LDB_SUCCESS
) {
425 /* now fetch the resulting object, and then copy it to all the
426 * other partitions. We need this approach to cope with the
427 * partitions getting out of sync. If for example the
428 * @ATTRIBUTES object exists on one partition but not the
429 * others then just doing each of the partitions in turn will
432 search_ret
= dsdb_module_search_dn(module
, ac
, &res
, dn
, NULL
, DSDB_FLAG_NEXT_MODULE
, req
);
433 if (search_ret
!= LDB_SUCCESS
&& ret
!= LDB_ERR_NO_SUCH_OBJECT
) {
437 /* now delete the object in the other partitions. Once that is
438 done we will re-add the object, if search_ret was not
439 LDB_ERR_NO_SUCH_OBJECT
441 for (i
=0; data
->partitions
&& data
->partitions
[i
]; i
++) {
443 pret
= dsdb_module_del(data
->partitions
[i
]->module
, dn
, DSDB_FLAG_NEXT_MODULE
, req
);
444 if (pret
!= LDB_SUCCESS
&& pret
!= LDB_ERR_NO_SUCH_OBJECT
) {
445 /* we should only get success or no
446 such object from the other partitions */
452 if (search_ret
!= LDB_ERR_NO_SUCH_OBJECT
) {
453 /* now re-add in the other partitions */
454 for (i
=0; data
->partitions
&& data
->partitions
[i
]; i
++) {
456 pret
= dsdb_module_add(data
->partitions
[i
]->module
, res
->msgs
[0], DSDB_FLAG_NEXT_MODULE
, req
);
457 if (pret
!= LDB_SUCCESS
) {
463 return ldb_module_done(req
, NULL
, NULL
, LDB_SUCCESS
);
467 * Figure out which backend a request needs to be aimed at. Some
468 * requests must be replicated to all backends
470 static int partition_replicate(struct ldb_module
*module
, struct ldb_request
*req
, struct ldb_dn
*dn
)
472 struct partition_context
*ac
;
475 struct dsdb_partition
*partition
;
476 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
477 struct partition_private_data
);
479 /* if we aren't initialised yet go further */
480 if (!data
|| !data
->partitions
) {
481 return ldb_next_request(module
, req
);
484 if (ldb_dn_is_special(dn
)) {
485 /* Is this a special DN, we need to replicate to every backend? */
486 for (i
=0; data
->replicate
&& data
->replicate
[i
]; i
++) {
487 if (ldb_dn_compare(data
->replicate
[i
],
490 ac
= partition_init_ctx(module
, req
);
492 return ldb_operr(ldb_module_get_ctx(module
));
495 return partition_copy_all(module
, ac
, req
, dn
);
500 /* Otherwise, we need to find the partition to fire it to */
503 partition
= find_partition(data
, dn
, req
);
506 * if we haven't found a matching partition
507 * pass the request to the main ldb
509 * TODO: we should maybe return an error here
510 * if it's not a special dn
513 return ldb_next_request(module
, req
);
516 ac
= partition_init_ctx(module
, req
);
518 return ldb_operr(ldb_module_get_ctx(module
));
521 /* we need to add a control but we never touch the original request */
522 ret
= partition_prep_request(ac
, partition
);
523 if (ret
!= LDB_SUCCESS
) {
527 /* fire the first one */
528 return partition_call_first(ac
);
532 static int partition_search(struct ldb_module
*module
, struct ldb_request
*req
)
534 struct ldb_control
**saved_controls
;
536 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
537 struct partition_private_data
);
538 struct partition_context
*ac
;
539 struct ldb_context
*ldb
;
540 struct loadparm_context
*lp_ctx
;
542 struct ldb_control
*search_control
= ldb_request_get_control(req
, LDB_CONTROL_SEARCH_OPTIONS_OID
);
543 struct ldb_control
*domain_scope_control
= ldb_request_get_control(req
, LDB_CONTROL_DOMAIN_SCOPE_OID
);
544 struct ldb_control
*no_gc_control
= ldb_request_get_control(req
, DSDB_CONTROL_NO_GLOBAL_CATALOG
);
546 struct ldb_search_options_control
*search_options
= NULL
;
547 struct dsdb_partition
*p
;
550 bool domain_scope
= false, phantom_root
= false;
552 /* see if we are still up-to-date */
553 ret
= partition_reload_if_required(module
, data
, req
);
554 if (ret
!= LDB_SUCCESS
) {
558 p
= find_partition(data
, NULL
, req
);
560 /* the caller specified what partition they want the
561 * search - just pass it on
563 return ldb_next_request(p
->module
, req
);
566 /* Get back the search options from the search control, and mark it as
567 * non-critical (to make backends and also dcpromo happy).
569 if (search_control
) {
570 search_options
= talloc_get_type(search_control
->data
, struct ldb_search_options_control
);
571 search_control
->critical
= 0;
575 /* Remove the "domain_scope" control, so we don't confuse a backend
577 if (domain_scope_control
&& !ldb_save_controls(domain_scope_control
, req
, &saved_controls
)) {
578 return ldb_oom(ldb_module_get_ctx(module
));
581 /* if we aren't initialised yet go further */
582 if (!data
|| !data
->partitions
) {
583 return ldb_next_request(module
, req
);
586 /* Special DNs without specified partition should go further */
587 if (ldb_dn_is_special(req
->op
.search
.base
)) {
588 return ldb_next_request(module
, req
);
591 /* Locate the options */
592 domain_scope
= (search_options
593 && (search_options
->search_options
& LDB_SEARCH_OPTION_DOMAIN_SCOPE
))
594 || domain_scope_control
;
595 phantom_root
= search_options
596 && (search_options
->search_options
& LDB_SEARCH_OPTION_PHANTOM_ROOT
);
598 /* Remove handled options from the search control flag */
599 if (search_options
) {
600 search_options
->search_options
= search_options
->search_options
601 & ~LDB_SEARCH_OPTION_DOMAIN_SCOPE
602 & ~LDB_SEARCH_OPTION_PHANTOM_ROOT
;
605 ac
= partition_init_ctx(module
, req
);
607 return ldb_operr(ldb_module_get_ctx(module
));
610 ldb
= ldb_module_get_ctx(ac
->module
);
611 lp_ctx
= talloc_get_type(ldb_get_opaque(ldb
, "loadparm"),
612 struct loadparm_context
);
614 /* Search from the base DN */
615 if (ldb_dn_is_null(req
->op
.search
.base
)) {
617 return ldb_error(ldb
, LDB_ERR_NO_SUCH_OBJECT
, "empty base DN");
619 return partition_send_all(module
, ac
, req
);
622 for (i
=0; data
->partitions
[i
]; i
++) {
623 bool match
= false, stop
= false;
625 if (data
->partitions
[i
]->partial_replica
&& no_gc_control
!= NULL
) {
626 if (ldb_dn_compare_base(data
->partitions
[i
]->ctrl
->dn
,
627 req
->op
.search
.base
) == 0) {
628 /* base DN is in a partial replica
629 with the NO_GLOBAL_CATALOG
630 control. This partition is invisible */
631 /* DEBUG(0,("DENYING NON-GC OP: %s\n", ldb_module_call_chain(req, req))); */
637 /* Phantom root: Find all partitions under the
638 * search base. We match if:
640 * 1) the DN we are looking for exactly matches a
641 * certain partition and always stop
642 * 2) the DN we are looking for is a parent of certain
643 * partitions and it isn't a scope base search
644 * 3) the DN we are looking for is a child of a certain
645 * partition and always stop
646 * - we don't need to go any further up in the
649 if (ldb_dn_compare(data
->partitions
[i
]->ctrl
->dn
,
650 req
->op
.search
.base
) == 0) {
655 (ldb_dn_compare_base(req
->op
.search
.base
,
656 data
->partitions
[i
]->ctrl
->dn
) == 0 &&
657 req
->op
.search
.scope
!= LDB_SCOPE_BASE
)) {
661 ldb_dn_compare_base(data
->partitions
[i
]->ctrl
->dn
,
662 req
->op
.search
.base
) == 0) {
664 stop
= true; /* note that this relies on partition ordering */
667 /* Domain scope: Find all partitions under the search
670 * We generate referral candidates if we haven't
671 * specified the domain scope control, haven't a base
672 * search* scope and the DN we are looking for is a real
673 * predecessor of certain partitions. When a new
674 * referral candidate is nearer to the DN than an
675 * existing one delete the latter (we want to have only
676 * the closest ones). When we checked this for all
677 * candidates we have the final referrals.
679 * We match if the DN we are looking for is a child of
680 * a certain partition or the partition
681 * DN itself - we don't need to go any further
682 * up in the hierarchy!
684 if ((!domain_scope
) &&
685 (req
->op
.search
.scope
!= LDB_SCOPE_BASE
) &&
686 (ldb_dn_compare_base(req
->op
.search
.base
,
687 data
->partitions
[i
]->ctrl
->dn
) == 0) &&
688 (ldb_dn_compare(req
->op
.search
.base
,
689 data
->partitions
[i
]->ctrl
->dn
) != 0)) {
690 char *ref
= talloc_asprintf(ac
,
692 lpcfg_dnsdomain(lp_ctx
),
693 ldb_dn_get_linearized(data
->partitions
[i
]->ctrl
->dn
),
694 req
->op
.search
.scope
== LDB_SCOPE_ONELEVEL
? "??base" : "");
700 /* Initialise the referrals list */
701 if (ac
->referrals
== NULL
) {
702 ac
->referrals
= (const char **) str_list_make_empty(ac
);
703 if (ac
->referrals
== NULL
) {
708 /* Check if the new referral candidate is
709 * closer to the base DN than already
710 * saved ones and delete the latters */
712 while (ac
->referrals
[j
] != NULL
) {
713 if (strstr(ac
->referrals
[j
],
714 ldb_dn_get_linearized(data
->partitions
[i
]->ctrl
->dn
)) != NULL
) {
715 str_list_remove(ac
->referrals
,
722 /* Add our new candidate */
723 ac
->referrals
= str_list_add(ac
->referrals
, ref
);
727 if (ac
->referrals
== NULL
) {
731 if (ldb_dn_compare_base(data
->partitions
[i
]->ctrl
->dn
, req
->op
.search
.base
) == 0) {
733 stop
= true; /* note that this relies on partition ordering */
738 ret
= partition_prep_request(ac
, data
->partitions
[i
]);
739 if (ret
!= LDB_SUCCESS
) {
747 /* Perhaps we didn't match any partitions. Try the main partition */
748 if (ac
->num_requests
== 0) {
750 return ldb_next_request(module
, req
);
753 /* fire the first one */
754 return partition_call_first(ac
);
758 static int partition_add(struct ldb_module
*module
, struct ldb_request
*req
)
760 return partition_replicate(module
, req
, req
->op
.add
.message
->dn
);
764 static int partition_modify(struct ldb_module
*module
, struct ldb_request
*req
)
766 return partition_replicate(module
, req
, req
->op
.mod
.message
->dn
);
770 static int partition_delete(struct ldb_module
*module
, struct ldb_request
*req
)
772 return partition_replicate(module
, req
, req
->op
.del
.dn
);
776 static int partition_rename(struct ldb_module
*module
, struct ldb_request
*req
)
779 struct dsdb_partition
*backend
, *backend2
;
781 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
782 struct partition_private_data
);
784 /* Skip the lot if 'data' isn't here yet (initialisation) */
786 return ldb_operr(ldb_module_get_ctx(module
));
789 backend
= find_partition(data
, req
->op
.rename
.olddn
, req
);
790 backend2
= find_partition(data
, req
->op
.rename
.newdn
, req
);
792 if ((backend
&& !backend2
) || (!backend
&& backend2
)) {
793 return LDB_ERR_AFFECTS_MULTIPLE_DSAS
;
796 if (backend
!= backend2
) {
797 ldb_asprintf_errstring(ldb_module_get_ctx(module
),
798 "Cannot rename from %s in %s to %s in %s: %s",
799 ldb_dn_get_linearized(req
->op
.rename
.olddn
),
800 ldb_dn_get_linearized(backend
->ctrl
->dn
),
801 ldb_dn_get_linearized(req
->op
.rename
.newdn
),
802 ldb_dn_get_linearized(backend2
->ctrl
->dn
),
803 ldb_strerror(LDB_ERR_AFFECTS_MULTIPLE_DSAS
));
804 return LDB_ERR_AFFECTS_MULTIPLE_DSAS
;
807 return partition_replicate(module
, req
, req
->op
.rename
.olddn
);
810 /* start a transaction */
811 static int partition_start_trans(struct ldb_module
*module
)
815 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
816 struct partition_private_data
);
817 /* Look at base DN */
818 /* Figure out which partition it is under */
819 /* Skip the lot if 'data' isn't here yet (initialization) */
820 if ((module
&& ldb_module_flags(ldb_module_get_ctx(module
)) & LDB_FLG_ENABLE_TRACING
)) {
821 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_start_trans() -> (metadata partition)");
823 ret
= ldb_next_start_trans(module
);
824 if (ret
!= LDB_SUCCESS
) {
828 ret
= partition_reload_if_required(module
, data
, NULL
);
829 if (ret
!= LDB_SUCCESS
) {
830 ldb_next_del_trans(module
);
834 ret
= partition_metadata_start_trans(module
);
835 if (ret
!= LDB_SUCCESS
) {
836 ldb_next_del_trans(module
);
840 for (i
=0; data
&& data
->partitions
&& data
->partitions
[i
]; i
++) {
841 if ((module
&& ldb_module_flags(ldb_module_get_ctx(module
)) & LDB_FLG_ENABLE_TRACING
)) {
842 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_start_trans() -> %s",
843 ldb_dn_get_linearized(data
->partitions
[i
]->ctrl
->dn
));
845 ret
= ldb_next_start_trans(data
->partitions
[i
]->module
);
846 if (ret
!= LDB_SUCCESS
) {
847 /* Back it out, if it fails on one */
848 for (i
--; i
>= 0; i
--) {
849 ldb_next_del_trans(data
->partitions
[i
]->module
);
851 ldb_next_del_trans(module
);
852 partition_metadata_del_trans(module
);
857 data
->in_transaction
++;
862 /* prepare for a commit */
863 static int partition_prepare_commit(struct ldb_module
*module
)
866 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
867 struct partition_private_data
);
870 for (i
=0; data
&& data
->partitions
&& data
->partitions
[i
]; i
++) {
871 if ((module
&& ldb_module_flags(ldb_module_get_ctx(module
)) & LDB_FLG_ENABLE_TRACING
)) {
872 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_prepare_commit() -> %s",
873 ldb_dn_get_linearized(data
->partitions
[i
]->ctrl
->dn
));
875 ret
= ldb_next_prepare_commit(data
->partitions
[i
]->module
);
876 if (ret
!= LDB_SUCCESS
) {
877 ldb_asprintf_errstring(ldb_module_get_ctx(module
), "prepare_commit error on %s: %s",
878 ldb_dn_get_linearized(data
->partitions
[i
]->ctrl
->dn
),
879 ldb_errstring(ldb_module_get_ctx(module
)));
884 if ((module
&& ldb_module_flags(ldb_module_get_ctx(module
)) & LDB_FLG_ENABLE_TRACING
)) {
885 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_prepare_commit() -> (metadata partition)");
888 ret
= ldb_next_prepare_commit(module
);
889 if (ret
!= LDB_SUCCESS
) {
893 /* metadata prepare commit must come last, as other partitions could modify
894 * the database inside the prepare commit method of a module */
895 return partition_metadata_prepare_commit(module
);
899 /* end a transaction */
900 static int partition_end_trans(struct ldb_module
*module
)
904 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
905 struct partition_private_data
);
909 if (data
->in_transaction
== 0) {
910 DEBUG(0,("partition end transaction mismatch\n"));
911 ret
= LDB_ERR_OPERATIONS_ERROR
;
913 data
->in_transaction
--;
916 ret2
= partition_metadata_end_trans(module
);
917 if (ret2
!= LDB_SUCCESS
) {
921 for (i
=0; data
&& data
->partitions
&& data
->partitions
[i
]; i
++) {
922 if ((module
&& ldb_module_flags(ldb_module_get_ctx(module
)) & LDB_FLG_ENABLE_TRACING
)) {
923 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_end_trans() -> %s",
924 ldb_dn_get_linearized(data
->partitions
[i
]->ctrl
->dn
));
926 ret2
= ldb_next_end_trans(data
->partitions
[i
]->module
);
927 if (ret2
!= LDB_SUCCESS
) {
928 ldb_asprintf_errstring(ldb_module_get_ctx(module
), "end_trans error on %s: %s",
929 ldb_dn_get_linearized(data
->partitions
[i
]->ctrl
->dn
),
930 ldb_errstring(ldb_module_get_ctx(module
)));
935 if ((module
&& ldb_module_flags(ldb_module_get_ctx(module
)) & LDB_FLG_ENABLE_TRACING
)) {
936 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_end_trans() -> (metadata partition)");
938 ret2
= ldb_next_end_trans(module
);
939 if (ret2
!= LDB_SUCCESS
) {
945 /* delete a transaction */
946 static int partition_del_trans(struct ldb_module
*module
)
948 int ret
, final_ret
= LDB_SUCCESS
;
950 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
951 struct partition_private_data
);
952 ret
= partition_metadata_del_trans(module
);
953 if (ret
!= LDB_SUCCESS
) {
957 for (i
=0; data
&& data
->partitions
&& data
->partitions
[i
]; i
++) {
958 if ((module
&& ldb_module_flags(ldb_module_get_ctx(module
)) & LDB_FLG_ENABLE_TRACING
)) {
959 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_del_trans() -> %s",
960 ldb_dn_get_linearized(data
->partitions
[i
]->ctrl
->dn
));
962 ret
= ldb_next_del_trans(data
->partitions
[i
]->module
);
963 if (ret
!= LDB_SUCCESS
) {
964 ldb_asprintf_errstring(ldb_module_get_ctx(module
), "del_trans error on %s: %s",
965 ldb_dn_get_linearized(data
->partitions
[i
]->ctrl
->dn
),
966 ldb_errstring(ldb_module_get_ctx(module
)));
971 if (data
->in_transaction
== 0) {
972 DEBUG(0,("partition del transaction mismatch\n"));
973 return ldb_operr(ldb_module_get_ctx(module
));
975 data
->in_transaction
--;
977 if ((module
&& ldb_module_flags(ldb_module_get_ctx(module
)) & LDB_FLG_ENABLE_TRACING
)) {
978 ldb_debug(ldb_module_get_ctx(module
), LDB_DEBUG_TRACE
, "partition_del_trans() -> (metadata partition)");
980 ret
= ldb_next_del_trans(module
);
981 if (ret
!= LDB_SUCCESS
) {
987 int partition_primary_sequence_number(struct ldb_module
*module
, TALLOC_CTX
*mem_ctx
,
988 enum ldb_sequence_type type
, uint64_t *seq_number
,
989 struct ldb_request
*parent
)
992 struct ldb_result
*res
;
993 struct ldb_seqnum_request
*tseq
;
994 struct ldb_seqnum_result
*seqr
;
996 tseq
= talloc_zero(mem_ctx
, struct ldb_seqnum_request
);
998 return ldb_oom(ldb_module_get_ctx(module
));
1002 ret
= dsdb_module_extended(module
, tseq
, &res
,
1003 LDB_EXTENDED_SEQUENCE_NUMBER
,
1005 DSDB_FLAG_NEXT_MODULE
,
1007 if (ret
!= LDB_SUCCESS
) {
1012 seqr
= talloc_get_type_abort(res
->extended
->data
,
1013 struct ldb_seqnum_result
);
1014 if (seqr
->flags
& LDB_SEQ_TIMESTAMP_SEQUENCE
) {
1016 return ldb_module_error(module
, LDB_ERR_OPERATIONS_ERROR
,
1017 "Primary backend in partition module returned a timestamp based seq");
1020 *seq_number
= seqr
->seq_num
;
1027 * Older version of sequence number as sum of sequence numbers for each partition
1029 int partition_sequence_number_from_partitions(struct ldb_module
*module
,
1030 struct ldb_request
*req
,
1031 struct ldb_extended
**ext
)
1035 uint64_t seq_number
= 0;
1036 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
1037 struct partition_private_data
);
1038 struct ldb_seqnum_request
*seq
;
1039 struct ldb_seqnum_result
*seqr
;
1040 struct ldb_request
*treq
;
1041 struct ldb_seqnum_request
*tseq
;
1042 struct ldb_seqnum_result
*tseqr
;
1043 struct ldb_result
*res
;
1044 struct dsdb_partition
*p
;
1046 p
= find_partition(data
, NULL
, req
);
1048 /* the caller specified what partition they want the
1049 * sequence number operation on - just pass it on
1051 return ldb_next_request(p
->module
, req
);
1054 seq
= talloc_get_type(req
->op
.extended
.data
, struct ldb_seqnum_request
);
1056 switch (seq
->type
) {
1058 case LDB_SEQ_HIGHEST_SEQ
:
1060 ret
= partition_primary_sequence_number(module
, req
, seq
->type
, &seq_number
, req
);
1061 if (ret
!= LDB_SUCCESS
) {
1065 /* Skip the lot if 'data' isn't here yet (initialisation) */
1066 for (i
=0; data
&& data
->partitions
&& data
->partitions
[i
]; i
++) {
1068 res
= talloc_zero(req
, struct ldb_result
);
1070 return ldb_oom(ldb_module_get_ctx(module
));
1072 tseq
= talloc_zero(res
, struct ldb_seqnum_request
);
1075 return ldb_oom(ldb_module_get_ctx(module
));
1077 tseq
->type
= seq
->type
;
1079 ret
= ldb_build_extended_req(&treq
, ldb_module_get_ctx(module
), res
,
1080 LDB_EXTENDED_SEQUENCE_NUMBER
,
1084 ldb_extended_default_callback
,
1086 LDB_REQ_SET_LOCATION(treq
);
1087 if (ret
!= LDB_SUCCESS
) {
1092 ret
= ldb_request_add_control(treq
,
1093 DSDB_CONTROL_CURRENT_PARTITION_OID
,
1094 false, data
->partitions
[i
]->ctrl
);
1095 if (ret
!= LDB_SUCCESS
) {
1100 ret
= partition_request(data
->partitions
[i
]->module
, treq
);
1101 if (ret
!= LDB_SUCCESS
) {
1105 ret
= ldb_wait(treq
->handle
, LDB_WAIT_ALL
);
1106 if (ret
!= LDB_SUCCESS
) {
1110 tseqr
= talloc_get_type(res
->extended
->data
,
1111 struct ldb_seqnum_result
);
1112 seq_number
+= tseqr
->seq_num
;
1117 case LDB_SEQ_HIGHEST_TIMESTAMP
:
1118 return ldb_module_error(module
, LDB_ERR_OPERATIONS_ERROR
, "LDB_SEQ_HIGHEST_TIMESTAMP not supported");
1121 *ext
= talloc_zero(req
, struct ldb_extended
);
1123 return ldb_oom(ldb_module_get_ctx(module
));
1125 seqr
= talloc_zero(*ext
, struct ldb_seqnum_result
);
1128 return ldb_oom(ldb_module_get_ctx(module
));
1130 (*ext
)->oid
= LDB_EXTENDED_SEQUENCE_NUMBER
;
1131 (*ext
)->data
= seqr
;
1133 seqr
->seq_num
= seq_number
;
1134 if (seq
->type
== LDB_SEQ_NEXT
) {
1138 seqr
->flags
|= LDB_SEQ_GLOBAL_SEQUENCE
;
1144 * Newer version of sequence number using metadata tdb
1146 static int partition_sequence_number(struct ldb_module
*module
, struct ldb_request
*req
)
1148 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
1149 struct partition_private_data
);
1150 struct ldb_extended
*ext
;
1151 struct ldb_seqnum_request
*seq
;
1152 struct ldb_seqnum_result
*seqr
;
1153 uint64_t seq_number
;
1154 struct dsdb_partition
*p
;
1157 p
= find_partition(data
, NULL
, req
);
1159 /* the caller specified what partition they want the
1160 * sequence number operation on - just pass it on
1162 return ldb_next_request(p
->module
, req
);
1165 seq
= talloc_get_type_abort(req
->op
.extended
.data
, struct ldb_seqnum_request
);
1166 switch (seq
->type
) {
1168 ret
= partition_metadata_sequence_number_increment(module
, &seq_number
);
1169 if (ret
!= LDB_SUCCESS
) {
1174 case LDB_SEQ_HIGHEST_SEQ
:
1175 ret
= partition_metadata_sequence_number(module
, &seq_number
);
1176 if (ret
!= LDB_SUCCESS
) {
1181 case LDB_SEQ_HIGHEST_TIMESTAMP
:
1182 return ldb_module_error(module
, LDB_ERR_OPERATIONS_ERROR
,
1183 "LDB_SEQ_HIGHEST_TIMESTAMP not supported");
1186 ext
= talloc_zero(req
, struct ldb_extended
);
1188 return ldb_module_oom(module
);
1190 seqr
= talloc_zero(ext
, struct ldb_seqnum_result
);
1193 return ldb_module_oom(module
);
1195 ext
->oid
= LDB_EXTENDED_SEQUENCE_NUMBER
;
1198 seqr
->seq_num
= seq_number
;
1199 seqr
->flags
|= LDB_SEQ_GLOBAL_SEQUENCE
;
1201 /* send request done */
1202 return ldb_module_done(req
, NULL
, ext
, LDB_SUCCESS
);
1206 static int partition_extended(struct ldb_module
*module
, struct ldb_request
*req
)
1208 struct partition_private_data
*data
= talloc_get_type(ldb_module_get_private(module
),
1209 struct partition_private_data
);
1210 struct partition_context
*ac
;
1213 /* if we aren't initialised yet go further */
1215 return ldb_next_request(module
, req
);
1218 /* see if we are still up-to-date */
1219 ret
= partition_reload_if_required(module
, data
, req
);
1220 if (ret
!= LDB_SUCCESS
) {
1224 if (strcmp(req
->op
.extended
.oid
, LDB_EXTENDED_SEQUENCE_NUMBER
) == 0) {
1225 return partition_sequence_number(module
, req
);
1228 if (strcmp(req
->op
.extended
.oid
, DSDB_EXTENDED_CREATE_PARTITION_OID
) == 0) {
1229 return partition_create(module
, req
);
1233 * as the extended operation has no dn
1234 * we need to send it to all partitions
1237 ac
= partition_init_ctx(module
, req
);
1239 return ldb_operr(ldb_module_get_ctx(module
));
1242 return partition_send_all(module
, ac
, req
);
1245 static const struct ldb_module_ops ldb_partition_module_ops
= {
1246 .name
= "partition",
1247 .init_context
= partition_init
,
1248 .search
= partition_search
,
1249 .add
= partition_add
,
1250 .modify
= partition_modify
,
1251 .del
= partition_delete
,
1252 .rename
= partition_rename
,
1253 .extended
= partition_extended
,
1254 .start_transaction
= partition_start_trans
,
1255 .prepare_commit
= partition_prepare_commit
,
1256 .end_transaction
= partition_end_trans
,
1257 .del_transaction
= partition_del_trans
,
1260 int ldb_partition_module_init(const char *version
)
1262 LDB_MODULE_CHECK_VERSION(version
);
1263 return ldb_register_module(&ldb_partition_module_ops
);