Re: (ITS#7758) slapcat exports entire databases when given a non-existent base
by pierangelo.masarati@polimi.it
On 12/05/2013 02:22 PM, Frank.Swasey(a)uvm.edu wrote:
>
> --Apple-Mail=_21ABCED4-5B52-47DB-9CA2-DFB23439A062
> Content-Transfer-Encoding: quoted-printable
> Content-Type: text/plain;
> charset=us-ascii
>
> On Dec 4, 2013, at 9:58 PM, quanah(a)zimbra.com wrote:
>
>> --On Wednesday, December 04, 2013 6:52 PM -0800 Howard Chu =
> <hyc(a)symas.com>=20
>> wrote:
>> =20
>>> quanah(a)OpenLDAP.org wrote:
>>>> Full_Name: Quanah Gibson-Mount
>>>> Version: 2.4.35
>>>> OS: Linux 2.6
>>>> URL: ftp://ftp.openldap.org/incoming/
>>>> Submission from: (NULL) (75.111.58.125)
>>>> =20
>>>> =20
>>>> If the root of the primary database is "", and you try and export a =
> base
>>>> that doesn't exist via slapcat, the entire database is exported =
> (i.e.,
>>>> it acts like you specified "" as the base):
>>> =20
>>> Works as designed. -b selects the backend that matches the DN you
>>> provided. A backend with suffix "" matches anything that nothing more
>>> specific matched. If you wanted to filter down to a specific branch, =
> you
>>> should have used -s. Closing this ITS.
>> =20
>> There is no backend matching cn=3Daccesslog. There is only "" and=20
>> "cn=3Dmonitor" on this particular server. The goal here was not to =
> export a=20
>> subtree, it was something trying to export the delta-syncrepl =
> accesslog on=20
>> a server that didn't have one. That should result in an error, not =
> match=20
>> the primary db rooted at "". I certainly wouldn't expect -n 3 to =
> default=20
>> to -n 1 if -n 3 doesn't exist. Neither should -b "cn=3Daccesslog" =
> default to=20
>> -b "". Those clearly do not match.
>
>
> Well, but -b is working as documented. Sadly, the -s parameter is =
> deprecated - so, that really shouldn't be used either. Therefore, since =
> -b simply grabs the -n that would contain the suffix specified (doesn't =
> do an exact suffix match and fail if not found as you wanted, Quanah) =
> and -s is deprecated - how is one to accomplish this in the future?
-H, as the man page suggests; -s is deprecated because -H does that and
more.
p.
>
> Frank
>
> --Apple-Mail=_21ABCED4-5B52-47DB-9CA2-DFB23439A062
> Content-Transfer-Encoding: 7bit
> Content-Disposition: attachment;
> filename=signature.asc
> Content-Type: application/pgp-signature;
> name=signature.asc
> Content-Description: Message signed with OpenPGP using GPGMail
>
> -----BEGIN PGP SIGNATURE-----
> Comment: GPGTools - http://gpgtools.org
>
> iQIcBAEBAgAGBQJSoH4GAAoJEMOj4l6rFnCNMy0QAIpAf0e2XJ5T6/sX2lnaP+ms
> DCXvsxIRjy5F/vBKT1VLt0Z9pj6N1fSpnwYg66rViyaN2A3I/2BJfhz2u3V6ita7
> /NeGgt2wEuS1OoVtULlapz1OAf91KuEASw7QLff2QmB3yS2Y3YGVom4Yu/h4EC0h
> aEBVKL088gbytJ19mPbRYN+7HYdcbO+QWiMvZER53wSvTV96vkOHFcUcXQf5fj6z
> 7QSMLzA9JUFFjYbYpvdjqtE9UqpPgLRLwIihbzN0DTX6HNavYGWPEzQGrMvvoUoN
> EP4uWNEGzfeV++yE0PiChGHtyqS/Q94nIQ6P815jBxN583oAtxTfIz6nFOyk4hV4
> RhkdpH36z77S1k/KgWbATt5bUvF/wRzIb3pXY0968gC2XHVfh/KzQtLYcOUNCSBG
> yFGbUz9MyBNlicfjlKaDtetHkXUTvS5u8hlx9jO/Ik9L0ZBSzUuWSTQpwt8FXY6T
> WTFjeugu/vqxOrRS2/0yrrrT65Z9MbGt32aKk4QwaZOXDJVAoE5o1WScfQsCeX1G
> 6DBEC/Y1LXgMcOMCs8aKnzQolnMXAiNz1wuMAMDC8ffSYgA34VR4keCKXcmzonKT
> kkiuLCJG2s28vQQrtpwlbnd+OYtAmtBBHcafHZvvYUreap3DlOhbuhbC19QvqCSh
> 9WzShIf7BJeIQW/5xeGk
> =2cju
> -----END PGP SIGNATURE-----
>
> --Apple-Mail=_21ABCED4-5B52-47DB-9CA2-DFB23439A062--
>
>
>
>
--
Pierangelo Masarati
Associate Professor
Dipartimento di Scienze e Tecnologie Aerospaziali
Politecnico di Milano