https://bugs.openldap.org/show_bug.cgi?id=9853
Issue ID: 9853 Summary: lastbind-precision conversion fails from slapd.conf to cn=config Product: OpenLDAP Version: 2.6.2 Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: slapd Assignee: bugs@openldap.org Reporter: quanah@openldap.org Target Milestone: ---
When converting a slapd.conf file to cn=config, the "lastbind-precision" value is not preserved.
slapd.conf:
lastbind-precision 300
cn=config value:
olcLastBindPrecision: 0
https://bugs.openldap.org/show_bug.cgi?id=9853
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.6.3
https://bugs.openldap.org/show_bug.cgi?id=9853
Ondřej Kuzník ondra@mistotebe.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |WORKSFORME
--- Comment #1 from Ondřej Kuzník ondra@mistotebe.net --- I can't reproduce this, the database where lastbind-precision is set has the value configured correctly. All other databases will have that value set to default = 0 as expected.
https://bugs.openldap.org/show_bug.cgi?id=9853
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.6.3 |--- Status|RESOLVED |VERIFIED Keywords|needs_review |
--- Comment #2 from Quanah Gibson-Mount quanah@openldap.org --- Ah, I was using an unordered LDIF and things didn't convert the way I expected. Looks fine if odd.
https://bugs.openldap.org/show_bug.cgi?id=9853
--- Comment #3 from Quanah Gibson-Mount quanah@openldap.org --- So open question is should it be possible to configure lastbind on the frontend, that is inherited by subdatabases, unless overridden by a subdatabase specific config.
https://bugs.openldap.org/show_bug.cgi?id=9853
--- Comment #4 from Ondřej Kuzník ondra@mistotebe.net --- As seen in another MR I had experimented with this, and should be easy enough, apart from the fact that historically a value of != 0 means allow that amount of seconds as a difference. So a 0 is both a default and meaningful config we'd be making fall back to frontend's precision.
Not sure that's a reason against since ways to achieve that configuration still exist.
https://bugs.openldap.org/show_bug.cgi?id=9853
--- Comment #5 from Quanah Gibson-Mount quanah@openldap.org --- head:
• 294a16c1 by Ondřej Kuzník at 2022-09-07T15:01:15+01:00 ITS#9853 Allow inheriting lastbind precision from the frontend
-
openldap-its＠openldap.org