https://bugs.openldap.org/show_bug.cgi?id=10160
Issue ID: 10160 Summary: Add negset and negurl for slapo-constraint Product: OpenLDAP Version: 2.6.6 Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: overlays Assignee: bugs@openldap.org Reporter: manu@netbsd.org Target Milestone: ---
Created attachment 1003 --> https://bugs.openldap.org/attachment.cgi?id=1003&action=edit Add negset and negurl for slapo-constraint
Add negset and negurl constraints for slapo-constraint. THe two new types are logical not of set and url. They will fire a constraint violation if the set or LDAP URL query is non empty.
https://bugs.openldap.org/show_bug.cgi?id=10160
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords|needs_review | Target Milestone|--- |2.7.0 Assignee|bugs@openldap.org |quanah@openldap.org
https://bugs.openldap.org/show_bug.cgi?id=10160
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0 |1
--- Comment #1 from Quanah Gibson-Mount quanah@openldap.org --- https://git.openldap.org/openldap/openldap/-/merge_requests/682
https://bugs.openldap.org/show_bug.cgi?id=10160
--- Comment #2 from Quanah Gibson-Mount quanah@openldap.org --- Manu,
Please see comments at https://git.openldap.org/openldap/openldap/-/merge_requests/682
As you already have created an account in our gitlab, it's not quite clear to me why you didn't open your own PR. It'd be helpful if that was done instead. ;)
https://bugs.openldap.org/show_bug.cgi?id=10160
mid@gtmp.org changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mid@gtmp.org
--- Comment #3 from mid@gtmp.org --- Created attachment 1046 --> https://bugs.openldap.org/attachment.cgi?id=1046&action=edit Add "neguri" and "negset" constraint types with reversed condition compared to the original types
Quanah, I worked recently on this very same topic before finding this issue and the corresponding MR.
As Manu does not seem to respond since February, and as I really need these features to be merged, I uploaded here the version I wrote that I eventually changed according to ideas from Manu's patch and the MR's comments.
It is based on the current (at the time of writing) git tip.
Feel free to use it at your will.
https://bugs.openldap.org/show_bug.cgi?id=10160
mid@gtmp.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Attachment #1046|0 |1 is obsolete| |
--- Comment #4 from mid@gtmp.org --- Created attachment 1047 --> https://bugs.openldap.org/attachment.cgi?id=1047&action=edit Add "neguri" and "negset" constraint types with reversed condition compared to the original types
Oops, typo in acl_match_set() condition, sorry.
https://bugs.openldap.org/show_bug.cgi?id=10160
--- Comment #5 from mid@gtmp.org --- See https://git.openldap.org/openldap/openldap/-/merge_requests/745 (same patch + some tests added)
https://bugs.openldap.org/show_bug.cgi?id=10160
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST
--- Comment #6 from Quanah Gibson-Mount quanah@openldap.org --- • 068881ef by Alexandre Jousset at 2025-02-12T17:46:55+00:00 ITS#10160 - Add "neguri" and "negset" constraint types to slapo-constraint
-
openldap-its＠openldap.org