Re: Problem with searches transgressing suffixmassage-d suffix

["matthew sporleder" <msporleder@gmail.com>]

On 6/26/06, Buchan Milne <bgmilne@staff.telkomsa.net> wrote:
> We have a weird legacy DIT which is going to be migrated to a new more
> organised structure by an ongoing project.
>
> In the meantime, we are deploying provisioning tools which we would prefer not
> to modify at the time of the migration.
>
> So, back-relay seems to be the obvious solution (provision to the final
> structure, rewrite with back-relay into the old structure).
>
> So, I have added a new database on one of our dev servers:
>
>
> database        relay
> suffix          "cn=webmail,cn=mail,ou=isp"
> subordinate
> relay           cn=webmail,ou=mail,dc=isp massage
> rootdn          <rootdn>
>
> There is a bdb database that holds cn=mail,ou=isp (the legacy basedn).
>
> That works great, searches on cn=webmail,cn=mail,ou=isp returns an entry I
> added under cn=webmail,ou=mail,dc=isp ... except that the first search on the
> cn=mail,ou=isp suffix kills the relay. Any other search which should find
> anything under cn=webmail,cn=mail,ou=isp returns error 32.
>
>
> I've also tried replacing the relay database with a configurations
> using "database meta" and "database ldap" with rwm-suffixmassage, and they do
> the same thing.
>
> It seems I must be missing something here ...


I have also setup something similar (although I'm attribute mapping),
and I don't see your problems.

Here's how mine is setup:
database        bdb
suffix          "dc=dept,dc=com"
rootdn          "cn=Manager,dc=dept,dc=com"
rootpw          somesecret
directory       /usr/local/openldap64-ol2.3.23-bdb4.2.52//var/openldap-data
index   objectClass     eq

database        relay
suffix          "ou=solaris,dc=test,dc=net"
overlay         rwm
map attribute homeDirectory testSolarisHomeDirectory
suffixmassage   "dc=dept,dc=com"

database        relay
suffix          "ou=linux,dc=test,dc=net"
overlay         rwm
map attribute homeDirectory testLinuxHomeDirectory
suffixmassage   "dc=dept,dc=com"

I do end up with two homeDirectory attributes coming back if I search
for all attributes, but searches specifically for homeDirectory return
my test*HomeDirectory stuff.