From friedrich.locke@gmail.com Fri Jul  8 13:52:29 2011
From: Friedrich Locke <friedrich.locke@gmail.com>
To: openldap-technical@openldap.org
Subject: limits
Date: Fri, 08 Jul 2011 10:51:45 -0300
Message-ID:
 <CANMDHqc1h+85=QTBg1QPJwsQEbbonvM92Sj7O2L6QgDosmepfA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3294321753062195725=="

--===============3294321753062195725==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

Hi,

i have setted some limits in slapd.conf:

limits dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" time=2048 size=16384
limits dn.one="ou=people,dc=ufv,dc=br" time=4 size=1

But my log shows:

/etc/openldap/slapd.conf : line 80: deprecated "one" style "limits
<pattern> <limits>" line; use "onelevel" instead.

The error message is showed only for limits definition.
My access rules uses "one" and i get no complains in the log file, why?

Thanks in advance.


--===============3294321753062195725==--


From andrew.findlay@skills-1st.co.uk Fri Jul  8 15:11:37 2011
From: Andrew Findlay <andrew.findlay@skills-1st.co.uk>
To: openldap-technical@openldap.org
Subject: Re: limits
Date: Fri, 08 Jul 2011 16:11:32 +0100
Message-ID: <20110708151132.GE23172@slab.skills-1st.co.uk>
In-Reply-To:
 <CANMDHqc1h+85=QTBg1QPJwsQEbbonvM92Sj7O2L6QgDosmepfA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3506994076271515074=="

--===============3506994076271515074==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 08, 2011 at 10:51:45AM -0300, Friedrich Locke wrote:

> i have setted some limits in slapd.conf:
>=20
> limits dn.base=3D"cn=3Dypldap,ou=3Dappsrv,dc=3Dufv,dc=3Dbr" time=3D2048 siz=
e=3D16384
> limits dn.one=3D"ou=3Dpeople,dc=3Dufv,dc=3Dbr" time=3D4 size=3D1
>=20
> But my log shows:
>=20
> /etc/openldap/slapd.conf : line 80: deprecated "one" style "limits
> <pattern> <limits>" line; use "onelevel" instead.
>=20
> The error message is showed only for limits definition.
> My access rules uses "one" and i get no complains in the log file, why?

"one" is allowed in ACLs but it is not allowed in limits statements
"onelevel" is allowed in either place. This is inconsistent, but the
manpage does make clear what the rules are:

limits <selector> <limit> [<limit> [...]]
  Specify time and size limits based on the operation's initiator or  base  D=
N.
  The argument <selector> can be any of

	 anonymous | users | [<dnspec>=3D]<pattern> | group[/oc[/at]]=3D<pattern>

  with

	 <dnspec> ::=3D dn[.<type>][.<style>]

	 <type>  ::=3D self | this

	 <style>  ::=3D  exact  |  base | onelevel | subtree | children | regex | an=
onymous

Andrew
--=20
-----------------------------------------------------------------------
|                 From Andrew Findlay, Skills 1st Ltd                 |
| Consultant in large-scale systems, networks, and directory services |
|     http://www.skills-1st.co.uk/                +44 1628 782565     |
-----------------------------------------------------------------------


--===============3506994076271515074==--