On 08/21/2012 09:51 AM, michael@stroeder.com wrote:

It seems the following set-based constraints falsely fail even with valid modifications:

---------------------------- snip ---------------------------- # cn value has to be concatenated givenName SP sn constraint_attribute cn,sn,givenName set "(this/givenName + [ ] + this/sn) & this/cn"

restrict="ldap:///ou=People,dc=infraldap,dc=onlinebrief,dc=de??sub?(objectClass=dpagE2Person)"

# homeDirectory value has to be concatenated "/home/" uid constraint_attribute uid,homeDirectory set "([/home/] + this/uid) & this/homeDirectory"

restrict="ldap:///ou=People,dc=infraldap,dc=onlinebrief,dc=de??sub?(objectClass=posixAccount)" ---------------------------- snip ----------------------------

When I disable both valid modifications work.

Ciao, Michael.

Ok, here is an attempt to fix this:

ftp://ftp.openldap.org/incoming/jsynacek-20120821-slapo-constraint-set-fix.patch

Done on top of the latest OPENLDAP_REL_ENG_2_4 (7da024d80). Michael, can you please give it a quick try?

I will update the testsuit as well.