7:05 a.m.
Hi all,
I'm doing a bit of playing with slapo-pcache and have it working
fairly well (particularly once I realised that an individual attr can
live in only one proxyattrset).
However, there's one bit that I can't get working - is there any way
to define a template that will match a search which doesn't provide an
attr list?
i.e. I can see quite a few searches (presumably from amd) of the
following form (spacing and formatting changed by me to make it more
readable):
Jul 23 14:54:16 host1 slapd[26671]: conn=49 op=1
SRCH base="dc=inf,dc=ed,dc=ac,dc=uk" scope=2 deref=0
filter="(&(objectClass=amdmap)(amdmapName=home)(amdmapKey=root))"
Jul 23 14:54:16 host1 slapd[26671]: query template of incoming query =
(&(objectClass=)(amdmapName=)(amdmapKey=))
Jul 23 14:54:16 host1 slapd[26671]: QUERY NOT ANSWERABLE
Jul 23 14:54:16 host1 slapd[26671]: QUERY NOT CACHEABLE
Jul 23 14:54:16 host1 slapd[26671]: conn=49 op=1 SEARCH RESULT tag=101
err=0 nentries=0 text=
Note that there's no 'SRCH attr=' line.
I've tried proxyattrset of the following forms...
proxyattrset 1 *
proxyattrset 1
(both of which crash slapd)
And also
proxyattrset 1 <full list of attrs returned when none specified>
.... but this didn't work either.
Thanks in advance for any advice,
Cheers
Toby Blake
School of Informatics
University of Edinburgh
4:42 a.m.
On Thursday 26 July 2007 16:05, Toby Blake wrote:
Hi all,
I'm doing a bit of playing with slapo-pcache and have it working
fairly well (particularly once I realised that an individual attr can
live in only one proxyattrset).
Hm, I don't think that is correct. AFAIK it is
possible to have an attribute
present in multiple proxyattrsets.
However, there's one bit that I can't get working - is there
any way
to define a template that will match a search which doesn't provide an
attr list?
No. That is not possible.
i.e. I can see quite a few searches (presumably from amd) of the
following form (spacing and formatting changed by me to make it more
readable):
Jul 23 14:54:16 host1 slapd[26671]: conn=49 op=1
SRCH base="dc=inf,dc=ed,dc=ac,dc=uk" scope=2 deref=0
filter="(&(objectClass=amdmap)(amdmapName=home)(amdmapKey=root))"
Jul 23 14:54:16 host1 slapd[26671]: query template of incoming query =
(&(objectClass=)(amdmapName=)(amdmapKey=))
Jul 23 14:54:16 host1 slapd[26671]: QUERY NOT ANSWERABLE
Jul 23 14:54:16 host1 slapd[26671]: QUERY NOT CACHEABLE
Jul 23 14:54:16 host1 slapd[26671]: conn=49 op=1 SEARCH RESULT tag=101
err=0 nentries=0 text=
Note that there's no 'SRCH attr=' line.
I've tried proxyattrset of the following forms...
proxyattrset 1 *
proxyattrset 1
(both of which crash slapd)
And also
proxyattrset 1 <full list of attrs returned when none specified>
.... but this didn't work either.
Thanks in advance for any advice,
--
Ralf Haferkamp
SUSE LINUX Products GmbH, Maxfeldstrasse 5, D-90409 Nuernberg
T: +49-911-74053-0
F: +49-911-74053575 - Ralf.Haferkamp(a)suse.com
6:02 a.m.
> I'm doing a bit of playing with slapo-pcache and have it
working
> fairly well (particularly once I realised that an individual attr can
> live in only one proxyattrset).
Hm, I don't think that is correct. AFAIK it is possible to have an
attribute present in multiple proxyattrsets.
Hmmm, I may do a bit more checking on this, as I had some proxy
templates which were working and some which weren't - for no reason
that I could make out.
Then I came across this...
http://www.openldap.org/lists/openldap-bugs/200610/msg00090.html
.... which claims, in slapd.conf comments, that "Only one proxyattrset
definition may appear for any cache set".
I don't know whether this is accurate, but working on this assumption
and combining proxyattrsets accordingly, all my templates now seem to
work.
> However, there's one bit that I can't get working - is
there any way
> to define a template that will match a search which doesn't provide an
> attr list?
No. That is not possible.
Ah, OK, unfortunate. Thanks.
<snip>
Toby
7:28 a.m.
Bad form replying to myself, I know, but...
http://www.openldap.org/lists/openldap-bugs/200610/msg00090.html
.... which claims, in slapd.conf comments, that "Only one
proxyattrset definition may appear for any cache set".
Which was completely the wrong quote. It should have read:
"A given attribute may only appear in one proxyattrset"
Toby
1:46 a.m.
On Freitag, 27. Juli 2007, Toby Blake wrote:
Bad form replying to myself, I know, but...
> http://www.openldap.org/lists/openldap-bugs/200610/msg00090.html
>
> .... which claims, in slapd.conf comments, that "Only one
> proxyattrset definition may appear for any cache set".
Which was completely the wrong quote. It should have read:
"A given attribute may only appear in one proxyattrset"
Hm, funny enough if you look a few lines deeper in the above mail you will
see, that every attributeset, that is defined there, contains
the "objectclass" Attributetype :).
And I didn't find any indication in the available documentation that that
requirement is really true.
--
Ralf
2:25 a.m.
>>
http://www.openldap.org/lists/openldap-bugs/200610/msg00090.html
>>
>> .... which claims, in slapd.conf comments, that "Only one
>> proxyattrset definition may appear for any cache set".
>
> Which was completely the wrong quote. It should have read:
>
> "A given attribute may only appear in one proxyattrset"
Hm, funny enough if you look a few lines deeper in the above mail
you will see, that every attributeset, that is defined there,
contains the "objectclass" Attributetype :).
Hmmm, yes, so it does.
And I didn't find any indication in the available documentation
that
that requirement is really true.
Me neither, just that it was only when I started working with this
assumption (that an attr can only belong in one attrset) that I got my
templates working. I couldn't see any reason for some of them not
working prior to that.
Looks like I need to do a bit more testing on this...
Toby
5:35 a.m.
Hi all,
Apologies for digging up the past, but I asked about this in July last
year....
Date: Fri, 27 Jul 2007 13:42:41 +0200
From: Ralf Haferkamp <rhafer(a)suse.de>
To: openldap-software(a)openldap.org
Subject: Re: using slapo-pcache with an empty attr list
<snip>
> However, there's one bit that I can't get working - is
there any way
> to define a template that will match a search which doesn't provide an
> attr list?
No. That is not possible.
<snip>
Are there any plans on introducing such a feature, or technical
reasons why it can't be done? On a typical machine on which I'm
running slapo-pcache, I get about 70-80% of queries answered from the
cache - this would be 90%+ if queries that didn't specify attr lists
(i.e. gets all user attributes) could also be cached.
I'm not saying that I should be able to specify an emptry attr list
with proxyattrset - that probably wouldn't make a lot of sense, but
being able to set it to all the user attributes returned for a
particular query that doesn't specify which attrs it wants would be
very useful.
Cheers
Toby Blake
University of Edinburgh
--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
9:01 a.m.
Toby Blake wrote:
Hi all,
Apologies for digging up the past, but I asked about this in July last
year....
See ITS#5074, this was added to RE24 a couple weeks after the below post.
> Date: Fri, 27 Jul 2007 13:42:41 +0200
> From: Ralf Haferkamp<rhafer(a)suse.de>
> To: openldap-software(a)openldap.org
> Subject: Re: using slapo-pcache with an empty attr list
<snip>
>> However, there's one bit that I can't get working - is there any way
>> to define a template that will match a search which doesn't provide an
>> attr list?
> No. That is not possible.
<snip>
Are there any plans on introducing such a feature, or technical
reasons why it can't be done? On a typical machine on which I'm
running slapo-pcache, I get about 70-80% of queries answered from the
cache - this would be 90%+ if queries that didn't specify attr lists
(i.e. gets all user attributes) could also be cached.
I'm not saying that I should be able to specify an emptry attr list
with proxyattrset - that probably wouldn't make a lot of sense, but
being able to set it to all the user attributes returned for a
particular query that doesn't specify which attrs it wants would be
very useful.
Cheers
Toby Blake
University of Edinburgh
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
9:08 a.m.
On 5 Jun 2008, at 17:01, Howard Chu wrote:
See ITS#5074, this was added to RE24 a couple weeks after the below
post.
Brilliant, thanks for that - it'll help as a gentle nudge to move from
2.3 to 2.4.
Cheers
Toby
--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
5472
days inactive
5787
days old
openldap-software@openldap.org
8 comments
3 participants
participants (3)
-
Howard Chu -
Ralf Haferkamp -
Toby Blake