Re: (ITS#3838) Slapadd allows duplicate attr/value pairs

[hyc@symas.com]

I'm uncertain whether this counts as a bug, since it is documented that 
slapadd expects to only receive valid input. You are supposed to use 
ldapadd if you need full consistency checks.

daveh@ci.com.au wrote:
> Full_Name: Dave Horsfall
> Version: 2.2.26
> OS: FreeBSD 4.10-STABLE
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (192.65.182.30)
>
>
> SLAPADD allows duplicate attr/val pairs to be added, and these duplicates are
> retrieved with LDAPSEARCH, confusing any application that assumes uniqueness.
>
> Reproduce:
>
> Shut down SLAPD.  SLAPCAT.  Pick an entry, and duplicate an attribute (I noticed
> it with objectClass, but any will do).  SLAPADD that entry.  Start SLAPD, and
> retrieve that entry.  Note that LDAPADD does the right thing, and refuses
> duplicates.
>
> I think our duplicates were created when upgrading from 2.0 to 2.2, using a Perl
> script that "fixed" various attributes such as objectClass inheritance.
>
>
>   


-- 
  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support