Re: slapcat, PROXIED attributeDescription inserted, and cron jobs
btb(a)bitrate.net wrote:
hi-
i'm running slapcat from a daily cron job to back up cn=config and other
databases. i've recently updated from 2.4.21 to 2.4.23, and notice now
in the output of slapcat, messages such as
>slapcat -b 'cn=config' -l 'config.ldif'> /dev/null
PROXIED attributeDescription "OU" inserted.
PROXIED attributeDescription "DC" inserted.
a bit of searching seems to indicate that these shouldn't be cause for
concern, and are just informative messages.
Correct.
Usually, these messages occur because one of your cn=config entries has a
modifiersName or some other attribute containing a DN using these attributes,
and the config backend hasn't read the cn=schema,cn=config tree yet.
This situation never happened in 2.3 because only "cn=config" had write access
to the cn=config tree. But since 2.4 allows you to set the ACLs so that
arbitrary users can write to the tree, you can run into these cases.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/