Full_Name: Quanah Gibson-Mount
Version: 2.4
OS:
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (75.111.29.239)
The slapo-retcode man page has this as the example:
overlay retcode
retcode-parent "ou=RetCodes,dc=example,dc=com"
include ./retcode.conf
# Wait 10 seconds, then return success (0x00)
retcode-item "cn=Success after 10 seconds" 0x00 sleeptime=10
# Wait 10 seconds, then return timelimitExceeded (0x03)
retcode-item "cn=Timelimit after 10 seconds" 0x03 sleeptime=10
I think the "include" bit there is a mistake, and the following lines were the
contents of it?
--Quanah
Full_Name: Quanah Gibson-Mount
Version: 2.4
OS: NA
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (75.111.29.239)
The "overlay" directive in slapd.conf is listed under "general database
options", but it can in fact be global, depending on the overlay. At least the
wording in slapd.conf for this directive should be updated to reflect that.
Full_Name: Kostantinos Koukopoulos
Version: 2.4.11
OS:
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (195.134.100.30)
It would be helpfull if one could assign a variable in the context of
authz-regexp like one can in rwm-rewriteRule, ie. ${&&name(value)}, and then
dereference the variable name in some other context of slapo-rwm. This could be
done with some sort of cross-session variable support or with a sharing of
sessions between slapo-rwm and authz-regexp.
gdsroka(a)hotmail.com wrote:
> Full_Name: Gabriel Sroka
> Version: 2.4.9
> OS: Ubuntu
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (130.150.113.161)
>
>
> ldapsearch and other tools include a -C (uppercase) option to enable referral
> chasing, but the option doesn't show up in the tool_common_usage() nor on the
> man pages
This is intentional. This ITS will be closed.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
Full_Name: Gabriel Sroka
Version: 2.4.9
OS: Ubuntu
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (130.150.113.161)
ldapsearch and other tools include a -C (uppercase) option to enable referral
chasing, but the option doesn't show up in the tool_common_usage() nor on the
man pages
Full_Name: Kostantinos Koukopoulos
Version: 2.4.11
OS: Solaris 9
URL: ftp://ftp.openldap.org/incoming/kostantinos-koukopoulos-080723-2.patch
Submission from: (NULL) (195.134.100.30)
When using the translucent overlay, if one tries to use set syntax in an ACL or
ACI rule, in order to dereference the bound user, like in the example below,
then the user's entry is fetched from the local database only.
Example <who> clause:
by set="user/eduPersonOrgUnitDN & [ou=someunit,dc=someorg,dc=somecountry]"
If the 'eduPersonOrgUnitDN' attribute has not been modified it will not be found
in the local database. I believe it would be better if the remote database was
also checked, like when a search operation is performed against the overlay.
I found the problem was due to that acl_set_gather2 tries to fetch the attribute
directly from the backend, but the translucent overlay does not support this, so
the backend is used instead. I've attached a patch which makes acl_set_gather
always use an internal search operation to fetch the attribute, instead of
calling acl_set_gather2.
I've also tried to hack the translucent overlay so that it would support the
bi_entry_get_rw callback but I haven't been able to provide something that would
even satisfy me. I suppose I would have to use some sort of callback mechanism
like translucent_search_cb but I haven't figured it out yet.
Full_Name: Kostantinos Koukopoulos
Version: 2.4.10
OS: Solaris 9
URL: ftp://ftp.openldap.org/incoming/kostantinos-koukopoulos-080723.patch
Submission from: (NULL) (195.134.100.30)
It seems that while set syntax in ACIs is supported by aci_mask, it's impossible
to add a ACI value with set syntax. Debugging the problem I've found that in
OpenLDAPaciPrettyNormal, the subject part of the ACI value is stripped when the
type is 'set'. The included patch seems to correct the problem for me.
Full_Name: Gavin Henry
Version:
OS:
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (212.159.59.85)
Submitted by: ghenry
Just an ITS for syncing the online guide with what's in 2.4.11
Thanks.