[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Showing ALL attribute values && ACI's (ITS#3215)



> Quoting "Pierangelo Masarati" <ando@sys-net.it>:
>
>> I believe ACIs have never been tested after adding ACL caching...
>> Can you provide a significant portion of your LDIF and your
>> slapd.conf, so that I can test it?
>
> The included tar ball contains my slapd.conf, the ACL file and
> a LDIF dump. It's naturally not even CLOSE to my exact usage, but
> it will show the problem non the less...
>
> The password for the 'uid=turbo,ou=People,o=Swe.Net AB,c=SE' is
> 'turbo'. The problem is there in both GSSAPI and SIMPLE binds...

I have committed a quick fix to HEAD for this problem; essentially,
I disabled ACL caching for ACIs.  Please report if it works for you.
In 2.2, all you need to do is comment out the two occurrences of
ACL_RECORD_VALUE_STATE within ACI related code in servers/slapd/acl.c
(see attached patch).  Please report if it works by means of the ITS.

p.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it

    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497

Attachment: slapd-2.2-aci.patch
Description: Binary data