Viewing Incoming/7462
Full headers

Major security issue: yes  no

Notes:

Notification:

Date: Tue, 04 Dec 2012 10:09:38 +0000
From: tioteath@gmail.com
To: openldap-its@OpenLDAP.org
Subject: olcPcache cannot be modified

Full_Name: Tio Teath
Version: 2.4.33
OS: Debian GNU Linux Wheezy
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (178.172.239.4)


I'm getting 'LDAP: error code 80 - cannot delete olcPcache' while I'm trying to
perform olcPcache modification:
dn: olcOverlay={0}pcache,olcDatabase={1}ldap,cn=config
changetype: modify
replace: olcPcache
olcPcache: hdb 10000 4 500 100
-

I have to perform this action in case, I need to extend the number of
pcacheAttrset directives.

Followup 1

Date: Sun, 6 Jan 2013 17:26:14 +0100
Subject: Re: (ITS#7462) olcPcache cannot be modified
From: "Pierangelo Masarati" <masarati@aero.polimi.it>
To: tioteath@gmail.com
Cc: openldap-its@openldap.org

> Full_Name: Tio Teath
> Version: 2.4.33
> OS: Debian GNU Linux Wheezy
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (178.172.239.4)
>
>
> I'm getting 'LDAP: error code 80 - cannot delete olcPcache' while I'm
> trying to
> perform olcPcache modification:
> dn: olcOverlay={0}pcache,olcDatabase={1}ldap,cn=config
> changetype: modify
> replace: olcPcache
> olcPcache: hdb 10000 4 500 100
> -
>
> I have to perform this action in case, I need to extend the number of
> pcacheAttrset directives.

Although the impossibility to modify olcPcache may be viewed as a bug, I
have the impression that a broad class of modifications e.g. to
olcPcacheTemplate are likely to invalidate an existing cache.

The fix should also consider the opportunity of thrashing the whole cache,
unless a clever means to only address entries associated with the
olcPcacheTemplate involved in the modification is found.

My 2c.  p.

-- 
Pierangelo Masarati
Associate Professor
Dipartimento di Ingegneria Aerospaziale
Politecnico di Milano