2 Unix SMB/CIFS implementation.
6 Copyright (C) Andrew Tridgell 2004-2009
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 the stupidity of the unix fcntl locking design forces us to never
24 allow a database file to be opened twice in the same process. These
25 wrappers provide convenient access to a tdb or ldb, taking advantage
26 of talloc destructors to ensure that only a single open is done
30 #include "lib/events/events.h"
31 #include "lib/ldb/include/ldb.h"
32 #include "lib/ldb/include/ldb_errors.h"
33 #include "lib/ldb-samba/ldif_handlers.h"
35 #include "dsdb/samdb/samdb.h"
36 #include "param/param.h"
37 #include "../lib/util/dlinklist.h"
38 #include "../tdb/include/tdb.h"
41 this is used to catch debug messages from ldb
43 static void ldb_wrap_debug(void *context, enum ldb_debug_level level,
44 const char *fmt, va_list ap) PRINTF_ATTRIBUTE(3,0);
46 static void ldb_wrap_debug(void *context, enum ldb_debug_level level,
47 const char *fmt, va_list ap)
58 case LDB_DEBUG_WARNING:
66 vasprintf(&s, fmt, ap);
68 DEBUG(samba_level, ("ldb: %s\n", s));
74 connecting to a ldb can be a relatively expensive operation because
75 of the schema and partition loads. We keep a list of open ldb
76 contexts here, and try to re-use when possible.
78 This means callers of ldb_wrap_connect() must use talloc_unlink() or
79 the free of a parent to destroy the context
81 static struct ldb_wrap {
82 struct ldb_wrap *next, *prev;
83 struct ldb_wrap_context {
84 /* the context is what we use to tell if two ldb
85 * connections are exactly equivalent
88 struct tevent_context *ev;
89 struct loadparm_context *lp_ctx;
90 struct auth_session_info *session_info;
91 struct cli_credentials *credentials;
94 struct ldb_context *ldb;
98 see if two database opens are equivalent
100 static bool ldb_wrap_same_context(const struct ldb_wrap_context *c1,
101 const struct ldb_wrap_context *c2)
103 return (c1->ev == c2->ev &&
104 c1->lp_ctx == c2->lp_ctx &&
105 c1->session_info == c2->session_info &&
106 c1->credentials == c2->credentials &&
107 c1->flags == c2->flags &&
108 (c1->url == c2->url || strcmp(c1->url, c2->url) == 0));
112 free a ldb_wrap structure
114 static int ldb_wrap_destructor(struct ldb_wrap *w)
116 DLIST_REMOVE(ldb_wrap_list, w);
121 wrapped connection to a ldb database
122 to close just talloc_free() the returned ldb_context
124 TODO: We need an error_string parameter
126 struct ldb_context *ldb_wrap_connect(TALLOC_CTX *mem_ctx,
127 struct tevent_context *ev,
128 struct loadparm_context *lp_ctx,
130 struct auth_session_info *session_info,
131 struct cli_credentials *credentials,
134 struct ldb_context *ldb;
136 char *real_url = NULL;
138 struct ldb_wrap_context c;
143 c.session_info = session_info;
144 c.credentials = credentials;
147 /* see if we can re-use an existing ldb */
148 for (w=ldb_wrap_list; w; w=w->next) {
149 if (ldb_wrap_same_context(&c, &w->context)) {
150 return talloc_reference(mem_ctx, w->ldb);
154 /* we want to use the existing event context if possible. This
155 relies on the fact that in smbd, everything is a child of
156 the main event_context */
161 ldb = ldb_init(mem_ctx, ev);
166 ldb_set_modules_dir(ldb,
169 lpcfg_modulesdir(lp_ctx)));
172 if (ldb_set_opaque(ldb, "sessionInfo", session_info)) {
179 if (ldb_set_opaque(ldb, "credentials", credentials)) {
185 if (ldb_set_opaque(ldb, "loadparm", lp_ctx)) {
190 /* This must be done before we load the schema, as these
191 * handlers for objectSid and objectGUID etc must take
192 * precedence over the 'binary attribute' declaration in the
194 ret = ldb_register_samba_handlers(ldb);
200 if (lp_ctx != NULL && strcmp(lpcfg_sam_url(lp_ctx), url) == 0) {
201 dsdb_set_global_schema(ldb);
204 ldb_set_debug(ldb, ldb_wrap_debug, NULL);
206 ldb_set_utf8_fns(ldb, NULL, wrap_casefold);
208 real_url = private_path(ldb, lp_ctx, url);
209 if (real_url == NULL) {
214 /* allow admins to force non-sync ldb for all databases */
215 if (lpcfg_parm_bool(lp_ctx, NULL, "ldb", "nosync", false)) {
216 flags |= LDB_FLG_NOSYNC;
220 flags |= LDB_FLG_ENABLE_TRACING;
223 /* we usually want Samba databases to be private. If we later
224 find we need one public, we will need to add a parameter to
225 ldb_wrap_connect() */
226 ldb_set_create_perms(ldb, 0600);
228 ret = ldb_connect(ldb, real_url, flags, NULL);
229 if (ret != LDB_SUCCESS) {
234 /* setup for leak detection */
235 ldb_set_opaque(ldb, "wrap_url", real_url);
237 /* add to the list of open ldb contexts */
238 w = talloc(ldb, struct ldb_wrap);
245 w->context.url = talloc_strdup(w, url);
246 if (w->context.url == NULL) {
252 /* take a reference to the session_info, as it is
253 * possible for the ldb to live longer than the
254 * session_info. This happens when a DRS DsBind call
255 * reuses a handle, but the original connection is
256 * shutdown. The token for the new connection is still
257 * valid, so we need the session_info to remain valid for
260 if (talloc_reference(w, session_info) == NULL) {
268 DLIST_ADD(ldb_wrap_list, w);
270 /* make the resulting schema global */
271 if (lp_ctx != NULL && strcmp(lpcfg_sam_url(lp_ctx), url) == 0) {
272 struct dsdb_schema *schema = dsdb_get_schema(ldb, NULL);
274 dsdb_make_schema_global(ldb, schema);
278 DEBUG(3,("ldb_wrap open of %s\n", url));
280 talloc_set_destructor(w, ldb_wrap_destructor);
286 when we fork() we need to make sure that any open ldb contexts have
287 any open transactions cancelled
289 void ldb_wrap_fork_hook(void)
293 for (w=ldb_wrap_list; w; w=w->next) {
294 if (ldb_transaction_cancel_noerr(w->ldb) != LDB_SUCCESS) {
295 smb_panic("Failed to cancel child transactions\n");
299 if (tdb_reopen_all(1) == -1) {
300 smb_panic("tdb_reopen_all failed\n");