openldap-bugs

openldap-bugs@openldap.org

1 participants
21001 discussions

(ITS#5705) [enhancement] slapo-constraint could honor "relax" by not checking for constraints
by ando＠sys-net.it 18 Sep '08

18 Sep '08

Full_Name: Pierangelo Masarati Version: irrelevant OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.72.89.40) Submitted by: ando See subject. p.

1 0

Issue in syncprov findcsn code
by Pierangelo Masarati 17 Sep '08

17 Sep '08

Not sure this is a bug, but I'm curious... I hit this while checking for ITS#5661. The code below is from HEAD's syncprov.c:613 (not changed recently; pardon any unintended line wrapping): <snip> again: switch( mode ) { case FIND_MAXCSN: cf.f_choice = LDAP_FILTER_GE; /* If there are multiple CSNs, use the one with our serverID */ for ( i=0; i<si->si_numcsns; i++) { if ( slap_serverID == si->si_sids[i] ) { maxid = i; break; } } </snip> When run by a consumer, with no serverID set (and thus slap_serverID == 0), it causes the consumer to use the contextCSN with SID == "000" instead of the most recent one. As a consequence, if one searches the contextCSN within that consumer, slapo-syncprov's syncprov_operational() causes only that value to be returned, instead of all contextCSNs. After the consumer is restarted, all values are correctly returned. To reproduce: - populate a DSA (SIDs in CSNs will default to "000") - turn it into a (multi)master by adding the serverID statement (with SID > "000") and so - perform a modification (so that the most recent contextCSN will have SID != "000") - create a consumer (no serverID statement, so that it defaults to "000") and let it pull data from the producer - search the contextCSN of the consumer I'm not sure this is a bug; it might be harmless, apart from being definitely misleading. There might be multiple solutions: - don't let syncprov_operational() muck with contextCSN that way - make syncprov_findcsn() search the newest contextCSN instead of the one with its SID - initialize slapd_serverID with some SID_UNDEFINED in order to take the action above only when SID is not defined p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

4 8

syncrepl failed without errors when a put a TAB character in slapd.conf
by liandro sg 17 Sep '08

17 Sep '08

Running slapd 2.4.10-3 version on debian 2.6.25-2-686 If I put a TAB (ascii character decimal 9) starting a line in slapd.conf , in front of syncrepl configuration option, the syncrepl funcionlity don't starts . The fonfiguration test ( slaptest) return success. If I delete the TAB character, syncrepl run ok

2 1

Re: (ITS#5704) [enhancement] allow restrictions in slapo-constraint(5)
by ando＠sys-net.it 17 Sep '08

17 Sep '08

ando(a)sys-net.it wrote: > This patch allows to restrict a constraint to entries matching an LDAP URI; > complements ITS#5702. ... in the sense that a constraint like constraint_attribute cn,sn,givenName set "(this/givenName + [ ] + this/sn) & this/cn" needs to be restricted to entries whose objectClass is derived from inetOrgPerson. This is accomplished by using constraint_attribute cn,sn,givenName set "(this/givenName + [ ] + this/sn) & this/cn" restrict="ldap:///dc=example,dc=com??sub?(objectClass=inetOrgPerson)" p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#5704) [enhancement] allow restrictions in slapo-constraint(5)
by ando＠sys-net.it 17 Sep '08

17 Sep '08

Full_Name: Pierangelo Masarati Version: HEAD OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.72.89.40) Submitted by: ando This patch allows to restrict a constraint to entries matching an LDAP URI; complements ITS#5702. p.

1 0

(ITS#5703) slapo-constraint(5) rename issue
by ando＠sys-net.it 17 Sep '08

17 Sep '08

Full_Name: Pierangelo Masarati Version: HEAD OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (131.175.154.148) Submitted by: ando I see an issue in slapo-constraint(5): it does not handle rename ops; as a consequence, a rename could result in violating constraints on the values of the naming attributes. p.

1 0

(ITS#5702) [enhancement] allow cross-attribute constraints in slapo-constraint(5)
by ando＠sys-net.it 16 Sep '08

16 Sep '08

Full_Name: Pierangelo Masarati Version: HEAD OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.72.89.40) Submitted by: ando I've added a "set" type to slapo-constraint(5) that allows to write complex constraints like constraint_attribute cn,sn,givenName set "(this/givenName + [ ] + this/sn) & this/cn" forcing a relationship between the values of cn, sn and givenName. The possibility to enforce the same constraint on multiple attributes separated by commas is given to all constraint types, as a side-effect. The check is passed the entry during add operations, while it attempts to build the entry resulting from a set of modifications during modify operations. p.

1 0

Re: (ITS#5663) Declaring substitute syntax as LDAP syntax
by ando＠sys-net.it 16 Sep '08

16 Sep '08

ando(a)sys-net.it wrote: > BTW: there are some minor bugs in that patch; for example, don't start > slapd with -F :). Michael, please try this one instead: <ftp://ftp.openldap.org/incoming/pierangelo-masarati-x-subst-2008-09-17.patch>. I won't probably be able to work at this stuff for a few days. Cheers, p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5663) Declaring substitute syntax as LDAP syntax
by hyc＠symas.com 16 Sep '08

16 Sep '08

ando(a)sys-net.it wrote: > I'd note rfc4517 does not > mention extensions, either... RFC4512 does. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5663) Declaring substitute syntax as LDAP syntax
by ando＠sys-net.it 16 Sep '08

16 Sep '08

michael(a)stroeder.com wrote: > You rock! I'll give it a try. BTW: there are some minor bugs in that patch; for example, don't start slapd with -F :). I should either submit a new one, or commit the whole stuff, but perhaps I'd wait for 2.4.12 to be out. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs