[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#3838) Slapadd allows duplicate attr/value pairs



Full_Name: Dave Horsfall
Version: 2.2.26
OS: FreeBSD 4.10-STABLE
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (192.65.182.30)


SLAPADD allows duplicate attr/val pairs to be added, and these duplicates are
retrieved with LDAPSEARCH, confusing any application that assumes uniqueness.

Reproduce:

Shut down SLAPD.  SLAPCAT.  Pick an entry, and duplicate an attribute (I noticed
it with objectClass, but any will do).  SLAPADD that entry.  Start SLAPD, and
retrieve that entry.  Note that LDAPADD does the right thing, and refuses
duplicates.

I think our duplicates were created when upgrading from 2.0 to 2.2, using a Perl
script that "fixed" various attributes such as objectClass inheritance.