Re: (ITS#7340) Regression in slapo-constraint
by jsynacek＠redhat.com
On 07/30/2012 08:38 PM, Michael Ströder wrote:
> Jan Synacek wrote:
>> On 07/27/2012 10:47 PM, michael(a)stroeder.com wrote:
>>> It seems there's a regression in slapo-constraint possibly caused by a patch for
>>> ITS#7168.
>>
>> This works for me:
>>
>> slapd.ldif:
>> ...
>> dn: olcOverlay=constraint,olcDatabase={1}bdb,cn=config
>> objectClass: olcOverlayConfig
>> objectClass: olcConstraintConfig
>> olcOverlay: constraint
>> olcConstraintAttribute: mail count 3
>> olcConstraintAttribute: description count 2
>> ...
>
> From the excerpt above it seems you've only added a count constraint.
>
> Please use more features of slapo-constraint for testing, e.g. regex- or
> URL-based constraints.
>
> The patch for ITS#7168 broke all my customer setups since I'm slapo-constraint
> quite heavily.
>
> Ciao, Michael.
>
I'm having hard time reproducing this. Still works for me.
Please provide a minimal setup and an example that fails, so I can fix the
patch. Thank you.
--
Jan Synacek
Software Engineer, BaseOS team Brno, Red Hat
10 years, 10 months
Re: (ITS#7340) Regression in slapo-constraint
by michael＠stroeder.com
This is a cryptographically signed message in MIME format.
--------------ms010302040303070900010905
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Jan Synacek wrote:
> On 07/27/2012 10:47 PM, michael(a)stroeder.com wrote:
>> It seems there's a regression in slapo-constraint possibly caused by a=
patch for
>> ITS#7168.
>=20
> This works for me:
>=20
> slapd.ldif:
> ...
> dn: olcOverlay=3Dconstraint,olcDatabase=3D{1}bdb,cn=3Dconfig
> objectClass: olcOverlayConfig
> objectClass: olcConstraintConfig
> olcOverlay: constraint
> olcConstraintAttribute: mail count 3
> olcConstraintAttribute: description count 2
> ...
=46rom the excerpt above it seems you've only added a count constraint.
Please use more features of slapo-constraint for testing, e.g. regex- or
URL-based constraints.
The patch for ITS#7168 broke all my customer setups since I'm slapo-const=
raint
quite heavily.
Ciao, Michael.
--------------ms010302040303070900010905
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILHzCC
BT8wggQnoAMCAQICDwCmSwABAAIAivjZQ8SBvzANBgkqhkiG9w0BAQUFADB8MQswCQYDVQQG
EwJERTEcMBoGA1UEChMTVEMgVHJ1c3RDZW50ZXIgR21iSDElMCMGA1UECxMcVEMgVHJ1c3RD
ZW50ZXIgQ2xhc3MgMSBMMSBDQTEoMCYGA1UEAxMfVEMgVHJ1c3RDZW50ZXIgQ2xhc3MgMSBM
MSBDQSBJWDAeFw0xMjA2MDYxOTAyMTZaFw0xMzA2MDcxOTAyMTZaMCgxCzAJBgNVBAYTAkRF
MRkwFwYDVQQDDBBNaWNoYWVsIFN0csO2ZGVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxXZGav40rnGNLxEggBW94MILWHlfC8a23Jew5U1gPlfRTXOjjzmoaZ1uCyGdgF6M
VvuO9T1aTQNGH+OdeGe3P7Tfc/NsLJFJ2wtd8blvhmodUgse2eypiWjNOd4gZuhalBhgsQ0K
b5D6/1foghII4E264iZlJ7AJ+UYcO+GxvFWT0YMTbLckgDkZk7c3qwTozdhYvXarvqx+8Ou/
kuxpQQhac/ebzxpu0N+RHSf2KIUS0g0tEGnPtGv6iL+9QNHc4JKo9Y9KKVw3tQy+Re+FQLxB
1fPE5F+qxuD3AUENpOwkMsqWLM94ohtx3CFqLpxfUPrnKFLAHOhHEbByYGvFPwIDAQABo4IC
EDCCAgwwgaUGCCsGAQUFBwEBBIGYMIGVMFEGCCsGAQUFBzAChkVodHRwOi8vd3d3LnRydXN0
Y2VudGVyLmRlL2NlcnRzZXJ2aWNlcy9jYWNlcnRzL3RjX2NsYXNzMV9MMV9DQV9JWC5jcnQw
QAYIKwYBBQUHMAGGNGh0dHA6Ly9vY3NwLml4LnRjY2xhc3MxLnRjdW5pdmVyc2FsLWkudHJ1
c3RjZW50ZXIuZGUwHwYDVR0jBBgwFoAU6bgoHUbP/M34TpvF7ktg69g7P9EwDAYDVR0TAQH/
BAIwADBKBgNVHSAEQzBBMD8GCSqCFAAsAQEBATAyMDAGCCsGAQUFBwIBFiRodHRwOi8vd3d3
LnRydXN0Y2VudGVyLmRlL2d1aWRlbGluZXMwDgYDVR0PAQH/BAQDAgTwMB0GA1UdDgQWBBS2
KAWfTfgJ/JQ63qLGwTXYLnI+LzBiBgNVHR8EWzBZMFegVaBThlFodHRwOi8vY3JsLml4LnRj
Y2xhc3MxLnRjdW5pdmVyc2FsLWkudHJ1c3RjZW50ZXIuZGUvY3JsL3YyL3RjX0NsYXNzMV9M
MV9DQV9JWC5jcmwwMwYDVR0lBCwwKgYIKwYBBQUHAwIGCCsGAQUFBwMEBggrBgEFBQcDBwYK
KwYBBAGCNxQCAjAfBgNVHREEGDAWgRRtaWNoYWVsQHN0cm9lZGVyLmNvbTANBgkqhkiG9w0B
AQUFAAOCAQEAQ3bvVUpEq+cQrLpcogyt5BJNk/WvUvOHqhzyj28M9pg9hcDl1+MYl5qqj6tR
GSTLPQZyf287pcmbMwbcTGZO/gbW9v7RYcut6RauWdwKMCUmKC3J4fVfDq9ZETA2WOV68ef4
B3Gzdhghsbp3Rhp5dDmrCVKAHlafm6ZwJrEQ9P76fxnQZzRLgeKpZep5ePH5YHUB3+YaOQvJ
FG0bOXvfHhRiRG7/HW2G+yDgjHSxDz8AFzMWL/RFePqZ4pn6T/SM/qU6WEpW39MWyJNoH/Kx
QDYK8gGYuesn1ciMCTnjrvZQj0fonGTO4SfWekJRkuGrJ7dYSZRjYbDcWBBkdFLWzzCCBdgw
ggTAoAMCAQICDgboAAEAAkqWLSQM/sXJMA0GCSqGSIb3DQEBBQUAMHkxCzAJBgNVBAYTAkRF
MRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSQwIgYDVQQLExtUQyBUcnVzdENlbnRl
ciBVbml2ZXJzYWwgQ0ExJjAkBgNVBAMTHVRDIFRydXN0Q2VudGVyIFVuaXZlcnNhbCBDQSBJ
MB4XDTA5MTEwMzE0MDgxOVoXDTI1MTIzMTIxNTk1OVowfDELMAkGA1UEBhMCREUxHDAaBgNV
BAoTE1RDIFRydXN0Q2VudGVyIEdtYkgxJTAjBgNVBAsTHFRDIFRydXN0Q2VudGVyIENsYXNz
IDEgTDEgQ0ExKDAmBgNVBAMTH1RDIFRydXN0Q2VudGVyIENsYXNzIDEgTDEgQ0EgSVgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75pBuz2Lp6QuqthDVR+V8XSsncZpozVVt
5KLv5P7yemMRwleKyH3PjmYfZUVL64Biab1GjovFblqVGCrep/EfdRonq20yU+P7TVhiLP8Z
5cegDZotIYhZhM0d8cPIij6w5d4IJM/8QCy6QSOUu4ASiTVItoYE4AFPjLqpmPwcie0fiqHH
hpgmHnJla/7PZdkMZEsaCfVDEWBmJuMzVprJPT40anjG5VBLyM2I5DlsUCaeQCy2O3w3sqf1
3dyzUcv03IICuNc63towXA31Qt0TaVNU6YAmQjMepdfMbspmCZ+G8D2+xophEPPR/1vkstst
smUMqX0XrLonTUJczglPAgMBAAGjggJZMIICVTCBmgYIKwYBBQUHAQEEgY0wgYowUgYIKwYB
BQUHMAKGRmh0dHA6Ly93d3cudHJ1c3RjZW50ZXIuZGUvY2VydHNlcnZpY2VzL2NhY2VydHMv
dGNfdW5pdmVyc2FsX3Jvb3RfSS5jcnQwNAYIKwYBBQUHMAGGKGh0dHA6Ly9vY3NwLnRjdW5p
dmVyc2FsLUkudHJ1c3RjZW50ZXIuZGUwHwYDVR0jBBgwFoAUkqR1LKSevoFE63n8isWVpesQ
dXMwEgYDVR0TAQH/BAgwBgEB/wIBADBSBgNVHSAESzBJMAYGBFUdIAAwPwYJKoIUACwBAQEB
MDIwMAYIKwYBBQUHAgEWJGh0dHA6Ly93d3cudHJ1c3RjZW50ZXIuZGUvZ3VpZGVsaW5lczAO
BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFOm4KB1Gz/zN+E6bxe5LYOvYOz/RMIH9BgNVHR8E
gfUwgfIwge+ggeyggemGRmh0dHA6Ly9jcmwudGN1bml2ZXJzYWwtSS50cnVzdGNlbnRlci5k
ZS9jcmwvdjIvdGNfdW5pdmVyc2FsX3Jvb3RfSS5jcmyGgZ5sZGFwOi8vd3d3LnRydXN0Y2Vu
dGVyLmRlL0NOPVRDJTIwVHJ1c3RDZW50ZXIlMjBVbml2ZXJzYWwlMjBDQSUyMEksTz1UQyUy
MFRydXN0Q2VudGVyJTIwR21iSCxPVT1yb290Y2VydHMsREM9dHJ1c3RjZW50ZXIsREM9ZGU/
Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlPzANBgkqhkiG9w0BAQUFAAOCAQEAOcjE
m+6+mO5Icm+N53G2DpCM07LBFSGoRpBoX0oE8TrJaIQh2KXmBHVdn9LU8kt3QzLclctgvwJV
0KwcsMUUl5tlCsMPpR3s2Ek5lbWpvvr0HqtW56blAQiINV9nBd1EJFASIkRjefGbV2nOq9Yz
UU+N8HA7jq1ROhd/NZZraGhjthwKyfjfHV7PKxGlY+3M0MbTIG+q/GhIfm0euDpFqhKG88e9
ALXr/uoSn3MzeOcoOWjTpW3adtFO4VWVgKbgG7jNrFbvRVlHmFLbOm4msjE5aXWxLiTwpJ2X
iF4zKca1vAdAOgw9us90jEtOeiH6GzjNxEMvb7TfeO6Zkuc6HDGCA84wggPKAgEBMIGPMHwx
CzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYDVQQLExxU
QyBUcnVzdENlbnRlciBDbGFzcyAxIEwxIENBMSgwJgYDVQQDEx9UQyBUcnVzdENlbnRlciBD
bGFzcyAxIEwxIENBIElYAg8ApksAAQACAIr42UPEgb8wCQYFKw4DAhoFAKCCAhMwGAYJKoZI
hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTIwNzMwMTgzODQyWjAjBgkq
hkiG9w0BCQQxFgQUbkqitqiUB3AUptpJBP8IZf85VpcwbAYJKoZIhvcNAQkPMV8wXTALBglg
hkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggq
hkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBoAYJKwYBBAGCNxAEMYGSMIGP
MHwxCzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYDVQQL
ExxUQyBUcnVzdENlbnRlciBDbGFzcyAxIEwxIENBMSgwJgYDVQQDEx9UQyBUcnVzdENlbnRl
ciBDbGFzcyAxIEwxIENBIElYAg8ApksAAQACAIr42UPEgb8wgaIGCyqGSIb3DQEJEAILMYGS
oIGPMHwxCzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYD
VQQLExxUQyBUcnVzdENlbnRlciBDbGFzcyAxIEwxIENBMSgwJgYDVQQDEx9UQyBUcnVzdENl
bnRlciBDbGFzcyAxIEwxIENBIElYAg8ApksAAQACAIr42UPEgb8wDQYJKoZIhvcNAQEBBQAE
ggEANow9ad7A3wr3HYgEMXZdssyB+upyWbuJ5LwbagTwOvHqIIJRTaKTIEvnUk09t4Jm5EIn
Z0Nx7RX/HhOSbK94k1azYSpfabscyEubVv5tmmIJLJ6uwGIk9+9tMr7D0sXj8AKxc5qb96sc
1Aj3NidCu5dE/qJhdiMK84FTAjqMbouQ0v+DaTuw8BDIjcQL7XNxyu536WAOB/5BGOtfms8e
SXH2bvNfYbw25+HdC8OTibBoMJrFXZExyT6lpqjgPcSrcixF1bK/Y9w8kxgqq7keFAw3rcuK
7vXpYMYKdazQFhr6Z4XlvH8AOeSdpDgyy9u3miaV/f5p1TBPyQyMAlq9SgAAAAAAAA==
--------------ms010302040303070900010905--
10 years, 10 months
Re: (ITS#7340) Regression in slapo-constraint
by jsynacek＠redhat.com
On 07/27/2012 10:47 PM, michael(a)stroeder.com wrote:
> Full_Name:
> Version: RE24 8a0ce24c5abaf687a41696d988f6a1330128368d
> OS:
> URL:
> Submission from: (NULL) (79.227.171.183)
>
>
> It seems there's a regression in slapo-constraint possibly caused by a patch for
> ITS#7168.
>
> If the client sends valid data which not violates a constraint
> CONSTRAINT_VIOLATION is returned:
>
> delete: departmentNumber
> departmentNumber: old_number
> -
> add: departmentNumber
> departmentNumber: new_number
> -
>
> It seems turning off only the constraint for departmentNumber does not help.
> Turning off all constraints makes it work.
>
This works for me:
slapd.ldif:
...
dn: olcOverlay=constraint,olcDatabase={1}bdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcConstraintConfig
olcOverlay: constraint
olcConstraintAttribute: mail count 3
olcConstraintAttribute: description count 2
...
root.ldif:
dn: dc=my-domain,dc=com
objectclass: dcObject
objectclass: organization
dc: my-domain
o: My Domain corp.
user.ldif:
dn: cn=usr2,dc=my-domain,dc=com
objectclass: inetOrgPerson
objectclass: organizationalPerson
cn: usr2
sn: usr2
mail: original(a)email.com
description: desc1
description: desc2
test.ldif:
dn: cn=usr2,dc=my-domain,dc=com
changetype: modify
delete: description
description: desc1
-
add: description
description: desc1-mod
< operation is successful >
Am I misunderstanding something? If it still doesn't work for you, please,
provide more information including your configuration and an example that fails.
--
Jan Synacek
Software Engineer, BaseOS team Brno, Red Hat
10 years, 10 months
(ITS#7340) Regression in slapo-constraint
by michael＠stroeder.com
Full_Name:
Version: RE24 8a0ce24c5abaf687a41696d988f6a1330128368d
OS:
URL:
Submission from: (NULL) (79.227.171.183)
It seems there's a regression in slapo-constraint possibly caused by a patch for
ITS#7168.
If the client sends valid data which not violates a constraint
CONSTRAINT_VIOLATION is returned:
delete: departmentNumber
departmentNumber: old_number
-
add: departmentNumber
departmentNumber: new_number
-
It seems turning off only the constraint for departmentNumber does not help.
Turning off all constraints makes it work.
10 years, 10 months
(ITS#7339) back-mdb aborts with online index additions
by hyc＠OpenLDAP.org
Full_Name: Howard Chu
Version: HEAD/RE24
OS:
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (37.19.97.21)
Submitted by: hyc
Already fixed in d1a7fa267bdb9e27777ba87db44034ce83a75084
If new databases are added (such as when adding a new index via cn=config) they
may cause additional pages to be dirtied during txn_commit. The pages would be
pulled from the freelist. But the updates occurred after the freelist had
already been written out, so the new state of the freelist wasn't being saved.
Subsequent transactions would abort due to internal corruption.
10 years, 10 months
(ITS#7338) Problems changing bdb DB_CONFIG parameters using back-config
by mhardin＠symas.com
Full_Name: Matthew Hardin
Version: 2.4.31
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (69.43.206.100)
Using back-config to update bdb DB_CONFIG parameters has problems.
Changing the parameters with back-config does work, and writes out a new
DB_CONFIG file, but a database reopen doesn't occur and therefore the
environment is not rebuilt. Furthermore, if one restarts slapd, a checkpoint
occurs, which in turn causes mtimes to change in the database and so the
rebuild-env-on-dbopen step isn't triggered.
The proper sequence should be:
close the db
write the new DB_CONFIG
open the db
The checkpoint will take place before DB_CONFIG is written, and on reopen, the
environment will be rebuilt.
10 years, 10 months
(ITS#7337) libmdb can corrupt when reaching maxsize
by hyc＠OpenLDAP.org
Full_Name: Howard Chu
Version: HEAD/RE24
OS:
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (37.19.97.21)
Submitted by: hyc
Already fixed by commit 234cd9dfb54ef2f7f83963d95b6eb8e9735bb372
If the DB maxsize was reached while pruning consumed records from the free list
inside mdb_txn_commit, the error was ignored. As a result the txn_commit would
return success even though it only partly succeeded.
The code is now fixed to abort the txn and return the error code.
10 years, 10 months
Re: (ITS#7335) Error in slapo-refint man page
by hyc＠symas.com
riggs(a)umn.edu wrote:
> Full_Name: Benjamin Riggs
> Version: 2.4.23
> OS: http://ftp.scientificlinux.org/linux/scientific/6x/i386/os/Packages/openl...
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (128.101.155.71)
>
>
> The slapo-refint man page has only documentation for slapd.conf, not
> slapd-config. Normally this wouldn't be a problem, but the configuration
> keywords are not the usual map of simply adding 'olc':
>
> refint_attributes is changed to olcRefintAttribute (no 's'!)
> refint_nothing is changed to olcRefintNothing
> refint_modifiersname is changed to olcRefintModifiersName
That's true. All of the manpages should be updated for cn=config. In that
respect this ITS can be combined with ITS#7288.
However, we need to decide on how the new information will be presented, to
avoid any unnecessary duplication. It's already quite redundant to maintain
both the cn=config and slapd.conf chapters of the Admin Guide.
Also, the overall issue is an extremely low priority, since all of the schema
definitions can simply be read out of the cn=schema,cn=config entry. The
slapd-config(5) manpage and Admin Guide already note that all of the schema
are present here, so anyone looking for this information should already know
to look there.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
10 years, 10 months
