5:16 a.m.
Hello list,
I've got records with e.g. multiple mail: entries per dn:
dn: cn=Joe Sixpack,ou=addressbook,dc=example,dc=org
[ 8< 8< 8< snip objectclasses and other stuff 8< 8< 8< ]
mail: user1(a)example.com
mail: user2(a)example.com
mail: user3(a)example.com
GUI ldap clients like jxplorer are able to change a single mail: entry.
Using "ldapmodify" I replace the first mail: entry, but it will delete
the other mail: antries:
#################################################################
change.diff file:
dn: cn=Joe Sixpack,ou=addressbook,dc=example,dc=com
changetype: modify
replace: mail
mail: otheruser(a)example.com
-
#################################################################
invoke:
ldapmodify -x -D "cn=admin,dc=example,dc=com" -W -f change.ldif
#################################################################
result:
dn: cn=Joe Sixpack,ou=addressbook,dc=example,dc=org
[ 8< 8< 8< snip objectclasses and other stuff 8< 8< 8< ]
mail: otheruser(a)example.com
#################################################################
Is there a way to tell ldapmodify to change just a particular entry?
R.
--
richard lucassen
http://contact.xaq.nl/
5:29 a.m.
Am Freitag, 13. Oktober 2017 14:16 CEST, richard lucassen
<mailinglists(a)lucassen.org> schrieb:
Hello list,
I've got records with e.g. multiple mail: entries per dn:
dn: cn=Joe Sixpack,ou=addressbook,dc=example,dc=org
[ 8< 8< 8< snip objectclasses and other stuff 8< 8< 8< ]
mail: user1(a)example.com
mail: user2(a)example.com
mail: user3(a)example.com
GUI ldap clients like jxplorer are able to change a single mail: entry.
Using "ldapmodify" I replace the first mail: entry, but it will delete
the other mail: antries:
<....>
Is there a way to tell ldapmodify to change just a particular entry?
A change of a single value equals a delete of that value plus an add of the new value,
doesn't it?
Cheers, Ralf Mattes
R.
--
richard lucassen
http://contact.xaq.nl/
8:06 a.m.
On Fri, 13 Oct 2017 14:29:23 +0200
"Ralf Mattes" <rm(a)mh-freiburg.de> wrote:
> mail: user1(a)example.com
> mail: user2(a)example.com
> mail: user3(a)example.com
>
> Is there a way to tell ldapmodify to change just a particular entry?
A change of a single value equals a delete of that value plus an add
of the new value, doesn't it?
Yep, but ldapmodify deletes *all* "mail:" entries. If I tcpdump the
stream of a jxplorer session, I see a modify request, which consists of
indeed a delete and an add. But the "delete" has an attribute value:
+modification: 2 items
+modification: item
operation: delete (1)
+ modification: mail
type: mail
+ vals: 1 item
AttributeValue: user2(a)example.com
operation: add (0)
+ modification: mail
type: mail
+ vals: 1 item
AttributeValue: otheruser(a)example.com
How do I tell ldapmodify just to delete 1 particular item with
AttributeValue=X, and not all of them?
R.
--
richard lucassen
http://contact.xaq.nl/
8:16 a.m.
Am Freitag, 13. Oktober 2017 17:06 CEST, richard lucassen
<mailinglists(a)lucassen.org> schrieb:
On Fri, 13 Oct 2017 14:29:23 +0200
"Ralf Mattes" <rm(a)mh-freiburg.de> wrote:
> > mail: user1(a)example.com
> > mail: user2(a)example.com
> > mail: user3(a)example.com
> >
> > Is there a way to tell ldapmodify to change just a particular entry?
>
> A change of a single value equals a delete of that value plus an add
> of the new value, doesn't it?
Yep, but ldapmodify deletes *all* "mail:" entries. If I tcpdump the
stream of a jxplorer session, I see a modify request, which consists of
indeed a delete and an add. But the "delete" has an attribute value:
Off course, that was my whole point - you need to delete the value you want to
modify, then add the new value.
+modification: 2 items
+modification: item
operation: delete (1)
+ modification: mail
type: mail
+ vals: 1 item
AttributeValue: user2(a)example.com
operation: add (0)
+ modification: mail
type: mail
+ vals: 1 item
AttributeValue: otheruser(a)example.com
How do I tell ldapmodify just to delete 1 particular item with
AttributeValue=X, and not all of them?
changetype: modify
delete: <attribute name>
<attribute name>: <attribute value>
HTH, Ralf Mattes
R.
--
richard lucassen
http://contact.xaq.nl/
10:46 a.m.
On Fri, 13 Oct 2017 17:16:00 +0200
"Ralf Mattes" <rm(a)mh-freiburg.de> wrote:
> Yep, but ldapmodify deletes *all* "mail:" entries. If
I tcpdump the
> stream of a jxplorer session, I see a modify request, which
> consists of indeed a delete and an add. But the "delete" has an
> attribute value:
Off course, that was my whole point - you need to delete the value
you want to modify, then add the new value.
Bit late this reply, sorry for that, but I've got everything under
control now. Sometimes things are not so very obvious for people who
are new to this matter :-)
R.
--
richard lucassen
http://contact.xaq.nl/
9:13 a.m.
richard lucassen wrote:
How do I tell ldapmodify just to delete 1 particular item with
AttributeValue=X, and not all of them?
Read about LDIF change records in RFC 2849.
Especially the examples section.
https://tools.ietf.org/html/rfc2849
Ciao, Michael.
6:36 p.m.
On Fri, 13 Oct 2017, richard lucassen wrote:
GUI ldap clients like jxplorer are able to change a single mail:
entry.
Using "ldapmodify" I replace the first mail: entry, but it will delete
the other mail: antries:
#################################################################
change.diff file:
dn: cn=Joe Sixpack,ou=addressbook,dc=example,dc=com
changetype: modify
replace: mail
mail: otheruser(a)example.com
-
In other words, it did exactly what you told it to do i.e. replace an
attribute that happened to have multiple values with one that has but a
singe value; you need to specify the entire set of desired values.
What a third-party application does is irrelevant; plainly it hid this
detail from you.
--
Dave Horsfall DTM (VK2KFU) "Those who don't understand security will
suffer."
2234
days inactive
2239
days old
openldap-technical@openldap.org
6 comments
4 participants
participants (4)
-
Dave Horsfall -
Michael Ströder -
Ralf Mattes -
richard lucassen