Re: Invalid Add operations allowed (ITS#2243)

[ando@sys-net.it]

> At 11:10 PM 1/29/2003, ntb@mts.ru wrote:
>>example from original message:
>>
>>---
>>dn: cn=mycountry,dc=mycompany,dc=com
>>objectclass: country
>>c: mycountry
>>---
>
> As I noted to Ando, the above entry is invalid.  An attempt
> to add such should result in an error such as noSuchAttribute.

... which is now the current behavior of slapd.
The only allowed cases, pending review, are:

dn: ou=Guests,dc=my,dc=org
objectClass: alias
aliasedObjectName: ou=People,dy=my,dc=org

and

dn: ou=Guests,dc=my,dc=org
objectClass: referral
ref: ldap://ldap.your.org/ou=People,dc=my,dc=org

which eventually (as exemplified in RFC3296) should be turned into

dn: ou=Guests,dc=my,dc=org
objectClass: referral
objectClass: extensibleObject
ou: Guests
ref: ldap://ldap.your.org/ou=People,dc=my,dc=org

and thus also comply with RFC2251.

I've added a /* FIXME */ in this sense in servers/slapd/add.c

Ando.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it