diff options
Diffstat (limited to 'source4/dsdb/samdb/ldb_modules/partition_init.c')
| -rw-r--r-- | source4/dsdb/samdb/ldb_modules/partition_init.c | 885 |
1 files changed, 885 insertions, 0 deletions
diff --git a/source4/dsdb/samdb/ldb_modules/partition_init.c b/source4/dsdb/samdb/ldb_modules/partition_init.c new file mode 100644 index 0000000..0c218e7 --- /dev/null +++ b/source4/dsdb/samdb/ldb_modules/partition_init.c @@ -0,0 +1,885 @@ +/* + Partitions ldb module + + Copyright (C) Andrew Bartlett <abartlet@samba.org> 2006 + Copyright (C) Stefan Metzmacher <metze@samba.org> 2007 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see <http://www.gnu.org/licenses/>. +*/ + +/* + * Name: ldb + * + * Component: ldb partitions module + * + * Description: Implement LDAP partitions + * + * Author: Andrew Bartlett + * Author: Stefan Metzmacher + */ + +#include "dsdb/samdb/ldb_modules/partition.h" +#include "lib/util/tsort.h" +#include "lib/ldb-samba/ldb_wrap.h" +#include "system/filesys.h" + +static int partition_sort_compare(const void *v1, const void *v2) +{ + const struct dsdb_partition *p1; + const struct dsdb_partition *p2; + + p1 = *((struct dsdb_partition * const*)v1); + p2 = *((struct dsdb_partition * const*)v2); + + return ldb_dn_compare(p1->ctrl->dn, p2->ctrl->dn); +} + +/* Load the list of DNs that we must replicate to all partitions */ +static int partition_load_replicate_dns(struct ldb_context *ldb, + struct partition_private_data *data, + struct ldb_message *msg) +{ + struct ldb_message_element *replicate_attributes = ldb_msg_find_element(msg, "replicateEntries"); + + talloc_free(data->replicate); + if (!replicate_attributes) { + data->replicate = NULL; + } else { + unsigned int i; + data->replicate = talloc_array(data, struct ldb_dn *, replicate_attributes->num_values + 1); + if (!data->replicate) { + return ldb_oom(ldb); + } + + for (i=0; i < replicate_attributes->num_values; i++) { + data->replicate[i] = ldb_dn_from_ldb_val(data->replicate, ldb, &replicate_attributes->values[i]); + if (!ldb_dn_validate(data->replicate[i])) { + ldb_asprintf_errstring(ldb, + "partition_init: " + "invalid DN in partition replicate record: %s", + replicate_attributes->values[i].data); + return LDB_ERR_CONSTRAINT_VIOLATION; + } + } + data->replicate[i] = NULL; + } + return LDB_SUCCESS; +} + +/* Load the list of modules for the partitions */ +static int partition_load_modules(struct ldb_context *ldb, + struct partition_private_data *data, struct ldb_message *msg) +{ + unsigned int i; + struct ldb_message_element *modules_attributes = ldb_msg_find_element(msg, "modules"); + talloc_free(data->modules); + if (!modules_attributes) { + return LDB_SUCCESS; + } + + data->modules = talloc_array(data, struct partition_module *, modules_attributes->num_values + 1); + if (!data->modules) { + return ldb_oom(ldb); + } + + for (i=0; i < modules_attributes->num_values; i++) { + char *p; + DATA_BLOB dn_blob; + data->modules[i] = talloc(data->modules, struct partition_module); + if (!data->modules[i]) { + return ldb_oom(ldb); + } + + dn_blob = modules_attributes->values[i]; + + p = strchr((const char *)dn_blob.data, ':'); + if (!p) { + ldb_asprintf_errstring(ldb, + "partition_load_modules: " + "invalid form for partition module record (missing ':'): %s", (const char *)dn_blob.data); + return LDB_ERR_CONSTRAINT_VIOLATION; + } + /* Now trim off the filename */ + dn_blob.length = ((uint8_t *)p - dn_blob.data); + + p++; + data->modules[i]->modules = ldb_modules_list_from_string(ldb, data->modules[i], + p); + + if (dn_blob.length == 1 && dn_blob.data[0] == '*') { + data->modules[i]->dn = NULL; + } else { + data->modules[i]->dn = ldb_dn_from_ldb_val(data->modules[i], ldb, &dn_blob); + if (!data->modules[i]->dn || !ldb_dn_validate(data->modules[i]->dn)) { + return ldb_operr(ldb); + } + } + } + data->modules[i] = NULL; + return LDB_SUCCESS; +} + +static int partition_reload_metadata(struct ldb_module *module, struct partition_private_data *data, + TALLOC_CTX *mem_ctx, struct ldb_message **_msg, + struct ldb_request *parent) +{ + int ret; + struct ldb_message *msg, *module_msg; + struct ldb_result *res; + struct ldb_context *ldb = ldb_module_get_ctx(module); + const char *attrs[] = { "partition", "replicateEntries", "modules", + "partialReplica", "backendStore", NULL }; + /* perform search for @PARTITION, looking for module, replicateEntries and ldapBackend */ + ret = dsdb_module_search_dn(module, mem_ctx, &res, + ldb_dn_new(mem_ctx, ldb, DSDB_PARTITION_DN), + attrs, + DSDB_FLAG_NEXT_MODULE, parent); + if (ret != LDB_SUCCESS) { + return ret; + } + + msg = res->msgs[0]; + + ret = partition_load_replicate_dns(ldb, data, msg); + if (ret != LDB_SUCCESS) { + return ret; + } + + /* When used from Samba4, this message is set by the samba4 + * module, as a fixed value not read from the DB. This avoids + * listing modules in the DB */ + if (data->forced_module_msg) { + module_msg = data->forced_module_msg; + } else { + module_msg = msg; + } + + ret = partition_load_modules(ldb, data, module_msg); + if (ret != LDB_SUCCESS) { + return ret; + } + + if (_msg) { + *_msg = msg; + } else { + talloc_free(msg); + } + + return LDB_SUCCESS; +} + +static const char **find_modules_for_dn(struct partition_private_data *data, struct ldb_dn *dn) +{ + unsigned int i; + struct partition_module *default_mod = NULL; + for (i=0; data->modules && data->modules[i]; i++) { + if (!data->modules[i]->dn) { + default_mod = data->modules[i]; + } else if (ldb_dn_compare(dn, data->modules[i]->dn) == 0) { + return data->modules[i]->modules; + } + } + if (default_mod) { + return default_mod->modules; + } else { + return NULL; + } +} + +static int new_partition_from_dn(struct ldb_context *ldb, struct partition_private_data *data, + TALLOC_CTX *mem_ctx, + struct ldb_dn *dn, const char *filename, + const char *backend_db_store, + struct dsdb_partition **partition) { + struct dsdb_control_current_partition *ctrl; + struct ldb_module *backend_module; + char *backend_path; + struct ldb_module *module_chain; + const char **modules; + const char **options = NULL; + int ret; + + (*partition) = talloc_zero(mem_ctx, struct dsdb_partition); + if (!*partition) { + return ldb_oom(ldb); + } + + (*partition)->ctrl = ctrl = talloc((*partition), struct dsdb_control_current_partition); + if (!ctrl) { + talloc_free(*partition); + return ldb_oom(ldb); + } + + /* the backend LDB is the DN (base64 encoded if not 'plain') followed by .ldb */ + backend_path = ldb_relative_path(ldb, + *partition, + filename); + if (!backend_path) { + ldb_asprintf_errstring(ldb, + "partition_init: unable to determine an relative path for partition: %s", + filename); + talloc_free(*partition); + return LDB_ERR_OPERATIONS_ERROR; + } + (*partition)->backend_url = talloc_asprintf(*partition, "%s://%s", + backend_db_store, + backend_path); + + if (!(ldb_module_flags(ldb) & LDB_FLG_RDONLY)) { + char *p; + char *backend_dir; + + p = strrchr(backend_path, '/'); + if (p) { + p[0] = '\0'; + } + backend_dir = backend_path; + + /* Failure is quite reasonable, it might already exist */ + mkdir(backend_dir, 0700); + } + + ctrl->version = DSDB_CONTROL_CURRENT_PARTITION_VERSION; + ctrl->dn = talloc_steal(ctrl, dn); + + options = ldb_options_get(ldb); + ret = ldb_module_connect_backend( + ldb, (*partition)->backend_url, options, &backend_module); + if (ret != LDB_SUCCESS) { + return ret; + } + talloc_steal((*partition), backend_module); + + modules = find_modules_for_dn(data, dn); + + if (!modules) { + DEBUG(0, ("Unable to load partition modules for new DN %s, perhaps you need to reprovision? See partition-upgrade.txt for instructions\n", ldb_dn_get_linearized(dn))); + talloc_free(*partition); + return LDB_ERR_CONSTRAINT_VIOLATION; + } + ret = ldb_module_load_list(ldb, modules, backend_module, &module_chain); + if (ret != LDB_SUCCESS) { + ldb_asprintf_errstring(ldb, + "partition_init: " + "loading backend for %s failed: %s", + ldb_dn_get_linearized(dn), ldb_errstring(ldb)); + talloc_free(*partition); + return ret; + } + ret = ldb_module_init_chain(ldb, module_chain); + if (ret != LDB_SUCCESS) { + ldb_asprintf_errstring(ldb, + "partition_init: " + "initialising backend for %s failed: %s", + ldb_dn_get_linearized(dn), ldb_errstring(ldb)); + talloc_free(*partition); + return ret; + } + + /* This weirdness allows us to use ldb_next_request() in partition.c */ + (*partition)->module = ldb_module_new(*partition, ldb, "partition_next", NULL); + if (!(*partition)->module) { + talloc_free(*partition); + return ldb_oom(ldb); + } + ldb_module_set_next((*partition)->module, talloc_steal((*partition)->module, module_chain)); + + /* if we were in a transaction then we need to start a + transaction on this new partition, otherwise we'll get a + transaction mismatch when we end the transaction */ + if (data->in_transaction) { + if (ldb_module_flags(ldb) & LDB_FLG_ENABLE_TRACING) { + ldb_debug(ldb, LDB_DEBUG_TRACE, "partition_start_trans() -> %s (new partition)", + ldb_dn_get_linearized((*partition)->ctrl->dn)); + } + ret = ldb_next_start_trans((*partition)->module); + } + + return ret; +} + +/* Tell the rootDSE about the new partition */ +static int partition_register(struct ldb_context *ldb, struct dsdb_control_current_partition *ctrl) +{ + struct ldb_request *req; + int ret; + + req = talloc_zero(NULL, struct ldb_request); + if (req == NULL) { + return ldb_oom(ldb); + } + + req->operation = LDB_REQ_REGISTER_PARTITION; + req->op.reg_partition.dn = ctrl->dn; + req->callback = ldb_op_default_callback; + + ldb_set_timeout(ldb, req, 0); + + req->handle = ldb_handle_new(req, ldb); + if (req->handle == NULL) { + talloc_free(req); + return ldb_operr(ldb); + } + + ret = ldb_request(ldb, req); + if (ret == LDB_SUCCESS) { + ret = ldb_wait(req->handle, LDB_WAIT_ALL); + } + if (ret != LDB_SUCCESS) { + ldb_debug(ldb, LDB_DEBUG_ERROR, "partition: Unable to register partition with rootdse!\n"); + talloc_free(req); + return LDB_ERR_OTHER; + } + talloc_free(req); + + return LDB_SUCCESS; +} + +/* Add a newly found partition to the global data */ +static int add_partition_to_data(struct ldb_context *ldb, struct partition_private_data *data, + struct dsdb_partition *partition) +{ + unsigned int i; + int ret; + + /* Count the partitions */ + for (i=0; data->partitions && data->partitions[i]; i++) { /* noop */}; + + /* Add partition to list of partitions */ + data->partitions = talloc_realloc(data, data->partitions, struct dsdb_partition *, i + 2); + if (!data->partitions) { + return ldb_oom(ldb); + } + data->partitions[i] = talloc_steal(data->partitions, partition); + data->partitions[i+1] = NULL; + + /* Sort again (should use binary insert) */ + TYPESAFE_QSORT(data->partitions, i+1, partition_sort_compare); + + ret = partition_register(ldb, partition->ctrl); + if (ret != LDB_SUCCESS) { + return ret; + } + return LDB_SUCCESS; +} + +int partition_reload_if_required(struct ldb_module *module, + struct partition_private_data *data, + struct ldb_request *parent) +{ + uint64_t seq; + int ret; + unsigned int i; + struct ldb_context *ldb = ldb_module_get_ctx(module); + struct ldb_message *msg; + struct ldb_message_element *partition_attributes; + struct ldb_message_element *partial_replicas; + TALLOC_CTX *mem_ctx; + + if (!data) { + /* Not initialised yet */ + return LDB_SUCCESS; + } + + mem_ctx = talloc_new(data); + if (!mem_ctx) { + return ldb_oom(ldb); + } + + ret = partition_primary_sequence_number(module, mem_ctx, &seq, parent); + if (ret != LDB_SUCCESS) { + talloc_free(mem_ctx); + return ret; + } + if (seq == data->metadata_seq) { + talloc_free(mem_ctx); + return LDB_SUCCESS; + } + + /* This loads metadata tdb. If it's missing, creates it */ + ret = partition_metadata_init(module); + if (ret != LDB_SUCCESS) { + return ret; + } + + ret = partition_reload_metadata(module, data, mem_ctx, &msg, parent); + if (ret != LDB_SUCCESS) { + talloc_free(mem_ctx); + return ret; + } + + data->metadata_seq = seq; + + partition_attributes = ldb_msg_find_element(msg, "partition"); + partial_replicas = ldb_msg_find_element(msg, "partialReplica"); + data->backend_db_store + = talloc_strdup(data, ldb_msg_find_attr_as_string(msg, "backendStore", "tdb")); + + if (data->backend_db_store == NULL) { + talloc_free(mem_ctx); + return ldb_module_oom(module); + } + + for (i=0; partition_attributes && i < partition_attributes->num_values; i++) { + unsigned int j; + bool new_partition = true; + const char *filename = NULL; + DATA_BLOB dn_blob; + struct ldb_dn *dn; + struct dsdb_partition *partition; + struct ldb_result *dn_res; + const char *no_attrs[] = { NULL }; + + for (j=0; data->partitions && data->partitions[j]; j++) { + if (data_blob_cmp(&data->partitions[j]->orig_record, &partition_attributes->values[i]) == 0) { + new_partition = false; + break; + } + } + if (new_partition == false) { + continue; + } + + dn_blob = partition_attributes->values[i]; + + if (dn_blob.length > 4 && + (strncmp((const char *)&dn_blob.data[dn_blob.length-4], ".ldb", 4) == 0)) { + + /* Look for DN:filename.ldb */ + char *p = strrchr((const char *)dn_blob.data, ':'); + if (!p) { + ldb_asprintf_errstring(ldb, + "partition_init: invalid DN in attempting to parse partition record: %s", (const char *)dn_blob.data); + talloc_free(mem_ctx); + return LDB_ERR_CONSTRAINT_VIOLATION; + } + filename = p+1; + + /* Now trim off the filename */ + dn_blob.length = ((uint8_t *)p - dn_blob.data); + } + + dn = ldb_dn_from_ldb_val(mem_ctx, ldb, &dn_blob); + if (!dn) { + ldb_asprintf_errstring(ldb, + "partition_init: invalid DN in partition record: %s", (const char *)dn_blob.data); + talloc_free(mem_ctx); + return LDB_ERR_CONSTRAINT_VIOLATION; + } + + /* Now do a slow check with the DN compare */ + for (j=0; data->partitions && data->partitions[j]; j++) { + if (ldb_dn_compare(dn, data->partitions[j]->ctrl->dn) == 0) { + new_partition = false; + break; + } + } + if (new_partition == false) { + continue; + } + + if (!filename) { + char *base64_dn = NULL; + const char *p; + for (p = ldb_dn_get_linearized(dn); *p; p++) { + /* We have such a strict check because I don't want shell metacharacters in the file name, nor ../ */ + if (!(isalnum(*p) || *p == ' ' || *p == '=' || *p == ',')) { + break; + } + } + if (*p) { + base64_dn = ldb_base64_encode(data, ldb_dn_get_linearized(dn), strlen(ldb_dn_get_linearized(dn))); + filename = talloc_asprintf(mem_ctx, "%s.ldb", base64_dn); + } else { + filename = talloc_asprintf(mem_ctx, "%s.ldb", ldb_dn_get_linearized(dn)); + } + } + + /* We call ldb_dn_get_linearized() because the DN in + * partition_attributes is already casefolded + * correctly. We don't want to mess that up as the + * schema isn't loaded yet */ + ret = new_partition_from_dn(ldb, data, data->partitions, dn, + filename, data->backend_db_store, + &partition); + if (ret != LDB_SUCCESS) { + talloc_free(mem_ctx); + return ret; + } + + talloc_steal(partition, partition_attributes->values[i].data); + partition->orig_record = partition_attributes->values[i]; + + /* Get the 'correct' case of the partition DNs from the database */ + ret = dsdb_module_search_dn(partition->module, data, &dn_res, + dn, no_attrs, + DSDB_FLAG_NEXT_MODULE, parent); + if (ret == LDB_SUCCESS) { + talloc_free(partition->ctrl->dn); + partition->ctrl->dn = talloc_steal(partition->ctrl, dn_res->msgs[0]->dn); + talloc_free(dn_res); + } else if (ret != LDB_ERR_NO_SUCH_OBJECT) { + ldb_asprintf_errstring(ldb, + "Failed to search for partition base %s in new partition at %s: %s", + ldb_dn_get_linearized(dn), + partition->backend_url, + ldb_errstring(ldb)); + talloc_free(mem_ctx); + return ret; + } + + /* see if it is a partial replica */ + for (j=0; partial_replicas && j<partial_replicas->num_values; j++) { + struct ldb_dn *pa_dn = ldb_dn_from_ldb_val(mem_ctx, ldb, &partial_replicas->values[j]); + if (pa_dn != NULL && ldb_dn_compare(pa_dn, partition->ctrl->dn) == 0) { + partition->partial_replica = true; + } + talloc_free(pa_dn); + } + + ret = add_partition_to_data(ldb, data, partition); + if (ret != LDB_SUCCESS) { + talloc_free(mem_ctx); + return ret; + } + } + + talloc_free(mem_ctx); + return LDB_SUCCESS; +} + +/* Copy the metadata (@OPTIONS etc) for the new partition into the partition */ + +static int new_partition_set_replicated_metadata(struct ldb_context *ldb, + struct ldb_module *module, struct ldb_request *last_req, + struct partition_private_data *data, + struct dsdb_partition *partition) +{ + unsigned int i; + int ret; + /* for each replicate, copy from main partition. If we get an error, we report it up the chain */ + for (i=0; data->replicate && data->replicate[i]; i++) { + struct ldb_result *replicate_res; + struct ldb_request *add_req; + ret = dsdb_module_search_dn(module, last_req, &replicate_res, + data->replicate[i], + NULL, + DSDB_FLAG_NEXT_MODULE, NULL); + if (ret == LDB_ERR_NO_SUCH_OBJECT) { + continue; + } + if (ret != LDB_SUCCESS) { + ldb_asprintf_errstring(ldb, + "Failed to search for %s from " DSDB_PARTITION_DN + " replicateEntries for new partition at %s on %s: %s", + ldb_dn_get_linearized(data->replicate[i]), + partition->backend_url, + ldb_dn_get_linearized(partition->ctrl->dn), + ldb_errstring(ldb)); + return ret; + } + + /* Build add request */ + ret = ldb_build_add_req(&add_req, ldb, replicate_res, + replicate_res->msgs[0], NULL, NULL, + ldb_op_default_callback, last_req); + LDB_REQ_SET_LOCATION(add_req); + last_req = add_req; + if (ret != LDB_SUCCESS) { + /* return directly, this is a very unlikely error */ + return ret; + } + /* do request */ + ret = ldb_next_request(partition->module, add_req); + /* wait */ + if (ret == LDB_SUCCESS) { + ret = ldb_wait(add_req->handle, LDB_WAIT_ALL); + } + + switch (ret) { + case LDB_SUCCESS: + break; + + case LDB_ERR_ENTRY_ALREADY_EXISTS: + /* Handle this case specially - if the + * metadata already exists, replace it */ + { + struct ldb_request *del_req; + + /* Don't leave a confusing string in the ldb_errstring() */ + ldb_reset_err_string(ldb); + /* Build del request */ + ret = ldb_build_del_req(&del_req, ldb, replicate_res, replicate_res->msgs[0]->dn, NULL, NULL, + ldb_op_default_callback, last_req); + LDB_REQ_SET_LOCATION(del_req); + last_req = del_req; + if (ret != LDB_SUCCESS) { + /* return directly, this is a very unlikely error */ + return ret; + } + /* do request */ + ret = ldb_next_request(partition->module, del_req); + + /* wait */ + if (ret == LDB_SUCCESS) { + ret = ldb_wait(del_req->handle, LDB_WAIT_ALL); + } + if (ret != LDB_SUCCESS) { + ldb_asprintf_errstring(ldb, + "Failed to delete (for re-add) %s from " DSDB_PARTITION_DN + " replicateEntries in new partition at %s on %s: %s", + ldb_dn_get_linearized(data->replicate[i]), + partition->backend_url, + ldb_dn_get_linearized(partition->ctrl->dn), + ldb_errstring(ldb)); + return ret; + } + + /* Build add request */ + ret = ldb_build_add_req(&add_req, ldb, replicate_res, replicate_res->msgs[0], NULL, NULL, + ldb_op_default_callback, last_req); + LDB_REQ_SET_LOCATION(add_req); + last_req = add_req; + if (ret != LDB_SUCCESS) { + /* return directly, this is a very unlikely error */ + return ret; + } + + /* do the add again */ + ret = ldb_next_request(partition->module, add_req); + + /* wait */ + if (ret == LDB_SUCCESS) { + ret = ldb_wait(add_req->handle, LDB_WAIT_ALL); + } + + if (ret != LDB_SUCCESS) { + ldb_asprintf_errstring(ldb, + "Failed to add (after delete) %s from " DSDB_PARTITION_DN + " replicateEntries to new partition at %s on %s: %s", + ldb_dn_get_linearized(data->replicate[i]), + partition->backend_url, + ldb_dn_get_linearized(partition->ctrl->dn), + ldb_errstring(ldb)); + return ret; + } + break; + } + default: + { + ldb_asprintf_errstring(ldb, + "Failed to add %s from " DSDB_PARTITION_DN + " replicateEntries to new partition at %s on %s: %s", + ldb_dn_get_linearized(data->replicate[i]), + partition->backend_url, + ldb_dn_get_linearized(partition->ctrl->dn), + ldb_errstring(ldb)); + return ret; + } + } + + /* And around again, for the next thing we must merge */ + } + return LDB_SUCCESS; +} + +/* Extended operation to create a new partition, called when + * 'new_partition' detects that one is being added based on it's + * instanceType */ +int partition_create(struct ldb_module *module, struct ldb_request *req) +{ + unsigned int i; + int ret; + struct ldb_context *ldb = ldb_module_get_ctx(module); + struct ldb_request *mod_req, *last_req = req; + struct ldb_message *mod_msg; + struct partition_private_data *data; + struct dsdb_partition *partition = NULL; + const char *casefold_dn; + bool new_partition = false; + + /* Check if this is already a partition */ + + struct dsdb_create_partition_exop *ex_op = talloc_get_type(req->op.extended.data, struct dsdb_create_partition_exop); + struct ldb_dn *dn = ex_op->new_dn; + + data = talloc_get_type(ldb_module_get_private(module), struct partition_private_data); + if (!data) { + /* We are not going to create a partition before we are even set up */ + return LDB_ERR_UNWILLING_TO_PERFORM; + } + + /* see if we are still up-to-date */ + ret = partition_reload_if_required(module, data, req); + if (ret != LDB_SUCCESS) { + return ret; + } + + for (i=0; data->partitions && data->partitions[i]; i++) { + if (ldb_dn_compare(data->partitions[i]->ctrl->dn, dn) == 0) { + partition = data->partitions[i]; + } + } + + if (!partition) { + char *filename; + char *partition_record; + new_partition = true; + mod_msg = ldb_msg_new(req); + if (!mod_msg) { + return ldb_oom(ldb); + } + + mod_msg->dn = ldb_dn_new(mod_msg, ldb, DSDB_PARTITION_DN); + + casefold_dn = ldb_dn_get_casefold(dn); + + { + char *escaped; + const char *p, *sam_name; + sam_name = strrchr((const char *)ldb_get_opaque(ldb, "ldb_url"), '/'); + if (!sam_name) { + return ldb_operr(ldb); + } + sam_name++; + + for (p = casefold_dn; *p; p++) { + /* We have such a strict check because + * I don't want shell metacharacters + * in the file name, nor ../, but I do + * want it to be easily typed if SAFE + * to do so */ + if (!(isalnum(*p) || *p == ' ' || *p == '=' || *p == ',')) { + break; + } + } + if (*p) { + escaped = rfc1738_escape_part(mod_msg, casefold_dn); + if (!escaped) { + return ldb_oom(ldb); + } + filename = talloc_asprintf(mod_msg, "%s.d/%s.ldb", sam_name, escaped); + talloc_free(escaped); + } else { + filename = talloc_asprintf(mod_msg, "%s.d/%s.ldb", sam_name, casefold_dn); + } + + if (!filename) { + return ldb_oom(ldb); + } + } + partition_record = talloc_asprintf(mod_msg, "%s:%s", casefold_dn, filename); + + ret = ldb_msg_append_steal_string(mod_msg, DSDB_PARTITION_ATTR, partition_record, + LDB_FLAG_MOD_ADD); + if (ret != LDB_SUCCESS) { + return ret; + } + + if (ldb_request_get_control(req, DSDB_CONTROL_PARTIAL_REPLICA)) { + /* this new partition is a partial replica */ + ret = ldb_msg_append_fmt(mod_msg, LDB_FLAG_MOD_ADD, + "partialReplica", "%s", ldb_dn_get_linearized(dn)); + if (ret != LDB_SUCCESS) { + return ret; + } + } + + /* Perform modify on @PARTITION record */ + ret = ldb_build_mod_req(&mod_req, ldb, req, mod_msg, NULL, NULL, + ldb_op_default_callback, req); + LDB_REQ_SET_LOCATION(mod_req); + if (ret != LDB_SUCCESS) { + return ret; + } + + last_req = mod_req; + + ret = ldb_next_request(module, mod_req); + if (ret == LDB_SUCCESS) { + ret = ldb_wait(mod_req->handle, LDB_WAIT_ALL); + } + + if (ret != LDB_SUCCESS) { + return ret; + } + + /* Make a partition structure for this new partition, so we can copy in the template structure */ + ret = new_partition_from_dn(ldb, data, req, ldb_dn_copy(req, dn), + filename, data->backend_db_store, + &partition); + if (ret != LDB_SUCCESS) { + return ret; + } + talloc_steal(partition, partition_record); + partition->orig_record = data_blob_string_const(partition_record); + } + + ret = new_partition_set_replicated_metadata(ldb, module, last_req, data, partition); + if (ret != LDB_SUCCESS) { + return ret; + } + + if (new_partition) { + ret = add_partition_to_data(ldb, data, partition); + if (ret != LDB_SUCCESS) { + return ret; + } + } + + /* send request done */ + return ldb_module_done(req, NULL, NULL, LDB_SUCCESS); +} + + +int partition_init(struct ldb_module *module) +{ + int ret; + TALLOC_CTX *mem_ctx = talloc_new(module); + struct ldb_context *ldb = ldb_module_get_ctx(module); + struct partition_private_data *data; + + if (!mem_ctx) { + return ldb_operr(ldb); + } + + /* We actually got this during the read_lock call */ + data = talloc_get_type_abort(ldb_module_get_private(module), + struct partition_private_data); + + /* This loads the partitions */ + ret = partition_reload_if_required(module, data, NULL); + if (ret != LDB_SUCCESS) { + return ret; + } + + ldb_module_set_private(module, talloc_steal(module, data)); + talloc_free(mem_ctx); + + ret = ldb_mod_register_control(module, LDB_CONTROL_DOMAIN_SCOPE_OID); + if (ret != LDB_SUCCESS) { + ldb_debug(ldb, LDB_DEBUG_ERROR, + "partition: Unable to register control with rootdse!\n"); + return ldb_operr(ldb); + } + + ret = ldb_mod_register_control(module, LDB_CONTROL_SEARCH_OPTIONS_OID); + if (ret != LDB_SUCCESS) { + ldb_debug(ldb, LDB_DEBUG_ERROR, + "partition: Unable to register control with rootdse!\n"); + return ldb_operr(ldb); + } + + return ldb_next_init(module); +} |