Re: (ITS#3931) slapcat -a doesn't work

[ando@sys-net.it]

> Full_Name: Quanah Gibson-Mount
> Version: REL ENG 2-3
> OS: Solaris 8
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (171.64.19.82)
>
>
> From ITS#3112, which added "-a" to slapcat, I find that:
>
> ldap-dev1:/root/tmp/db# slapcat -a
> "(!(entryDN:dnSubtree:=cn=People,dc=stanford,dc=edu))" -l test.ldif

The correct matchingRule is "dnSubtreeMatch"; with it, the filter you're
trying doesn't work as expected because the "entryDN" attribute is not
stored in the entry, but rather generated by the frontend, and slapcat
doesn't generate it.

THe solution would be, in case a filter is given, to generate the
"volatile" attributes before filtering and remove them before writing the
entry.  Note that this might have side effects (e.g. "volatile" attrs
generated by overlays/plugins that could not be designed to work in tool
mode and so).

I'm not 100% sure this is worth the effort.

p.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497