Re: (ITS#7340) Regression in slapo-constraint

[jsynacek@redhat.com]

On 08/21/2012 09:51 AM, michael@stroeder.com wrote:
> It seems the following set-based constraints falsely fail even with valid
> modifications:
> 
> ---------------------------- snip ----------------------------
> # cn value has to be concatenated givenName SP sn
> constraint_attribute cn,sn,givenName set
>   "(this/givenName + [ ] + this/sn) & this/cn"
> 
> restrict="ldap:///ou=People,dc=infraldap,dc=onlinebrief,dc=de??sub?(objectClass=dpagE2Person)"
> 
> # homeDirectory value has to be concatenated "/home/" uid
> constraint_attribute uid,homeDirectory set
>   "([/home/] + this/uid) & this/homeDirectory"
> 
> restrict="ldap:///ou=People,dc=infraldap,dc=onlinebrief,dc=de??sub?(objectClass=posixAccount)"
> ---------------------------- snip ----------------------------
> 
> When I disable both valid modifications work.
> 
> Ciao, Michael.
> 
> 
Ok, here is an attempt to fix this:

ftp://ftp.openldap.org/incoming/jsynacek-20120821-slapo-constraint-set-fix.patch

Done on top of the latest OPENLDAP_REL_ENG_2_4 (7da024d80). Michael, can you
please give it a quick try?

I will update the testsuit as well.

-- 
Jan Synacek
Software Engineer, BaseOS team Brno, Red Hat