(ITS#4442) slapo-refint does not prohibit deletion of entry

[michael@stroeder.com]

Full_Name: Michael Ströder
Version: 2.3.20
OS: SuSE Linux 10.0
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (83.124.25.207)


I'm using slapo-refint *without* configuration directive refint_nothing.

Although I'm deleting an entry whose DN is an attribute value of a MUST
attribute in another entry and both the error code and the log messages indicate
that this is not allowed the entry is deleted.

Mar 17 10:51:21 zd-ldap-s1 slapd[8012]: conn=1 op=16 DEL
dn="uid=user123,ou=Benutzer,dc=test,dc=de"
Mar 17 10:51:21 zd-ldap-s1 slapd[8012]: <= bdb_equality_candidates:
(roleOccupant) index_param failed (18)
Mar 17 10:51:21 zd-ldap-s1 slapd[8012]: <= bdb_equality_candidates:
(myattrOrgEinheitDN) index_param failed (18)
Mar 17 10:51:22 zd-ldap-s1 slapd[8012]: Entry
(departmentNumber=3,departmentNumber=myattr,ou=Orga,dc=test,dc=de): object c
lass 'myattrAbteilung' requires attribute 'myattrLeiter1'
Mar 17 10:51:22 zd-ldap-s1 slapd[8012]: entry failed schema check: object class
'myattrAbteilung' requires attribute 'myattrLeiter1'
Mar 17 10:51:22 zd-ldap-s1 slapd[8012]: conn=1 op=16 RESULT tag=107 err=65
text=dependent modify failed
Mar 17 10:51:56 zd-ldap-s1 slapd[8012]: conn=1 op=17 SRCH
base="uid=user123,ou=Benutzer,dc=test,dc=de" scope=0 deref=0
 filter="(objectClass=*)"
Mar 17 10:51:56 zd-ldap-s1 slapd[8012]: conn=1 op=17 SRCH attr=* +
Mar 17 10:51:56 zd-ldap-s1 slapd[8012]: conn=1 op=17 SEARCH RESULT tag=101
err=32 nentries=0 text=