Issue 8065 - autogroup+accesslog problems
Summary: autogroup+accesslog problems
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: contrib (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-02-25 14:53 UTC by Howard Chu
Modified: 2015-07-02 17:44 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description Howard Chu 2015-02-25 14:53:43 UTC
Full_Name: Howard Chu
Version: 2.4
OS: 
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (199.188.194.66)
Submitted by: hyc


The autogroup overlay doesn't work well with accesslog. This is the same problem
we've had in the past with e.g. memberof, refint, and other overlays that do
internal modifications as a side-effect of a main user operation. In particular,
autogroup's internal ops use the same timestamp as the original op, so accesslog
will log one of these internal ops and then none of the others because it uses
the timestamp for the RDN of its log entries, and that RDN is already in use.

This means the main user op never gets logged, nor do any side-effect
modifications after the first one.

The solution in previous cases has been to turn off all accesslog activity for
internal operations. In the case of accesslog used for replication, accesslog
should only log the main user operation, and it's up to replicas to perform the
same internal operations themselves as needed.
Comment 1 Howard Chu 2015-02-25 15:38:02 UTC
changed notes
changed state Open to Test
Comment 2 Quanah Gibson-Mount 2015-02-26 18:49:07 UTC
changed notes
changed state Test to Release
moved from Incoming to Contrib
Comment 3 OpenLDAP project 2015-07-02 17:44:25 UTC
fixed in master
fixed in RE25
fixed in RE24
Comment 4 Quanah Gibson-Mount 2015-07-02 17:44:25 UTC
changed notes
changed state Release to Closed