Issue 3959 - [enhancement] map undefined attributes from proxy as "proxied"
Summary: [enhancement] map undefined attributes from proxy as "proxied"
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-08-22 08:12 UTC by ando@openldap.org
Modified: 2014-08-01 21:06 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description ando@openldap.org 2005-08-22 08:12:57 UTC
Full_Name: Pierangelo Masarati
Version: HEAD
OS: Linux
URL: ftp://ftp.openldap.org/incoming/p.m.2005-08-22.proxied-attributes.patch
Submission from: (NULL) (81.74.43.82)
Submitted by: ando


This patch allows undefined attributes that are collected by proxies (e.g.
back-ldap, back-meta) to appear as "PROXIED", i.e. similar to "UNDEFINED", but
with usage set to 0, so that they appear in results muck like user attributes as
opposed to "UNDEFINED" attributes.  Moreover, in case attributes are in the
requested attributelist or in the filter of searches, or in compares, are not
known, they're looked up in the "PROXIED" as well, so that those operations can
be proxied.  This patch does not interfere with regular usage because only
proxies are supposed to insert "PROXIED" attribute descriptions, and th extra
lookup only occurs if an undefined attribute is used in a filter or in a search
request list.  Those lookups don't cause attribute insertion.  The "PROXIED"
attribute type has octetString syntax and
octectString[{Ordering|Substrings}]Match so that all filters including it are
considered valid, and the actual checking is delegated to the proxied server. 
In case a "PROXIED" or an "UNDEFINED" attribute description is inserted, by
updating the schema via back-config, the corresponding entry (or entries with
option tags) are removed.

p.

Comment 1 ando@openldap.org 2005-08-22 08:13:26 UTC
moved from Incoming to Contrib
Comment 2 ando@openldap.org 2005-08-22 08:47:17 UTC
A revised patch is in

>URL: <ftp://ftp.openldap.org/incoming/p.m.2005-08-22.proxied-attributes.2.patch>
>  
>
p.


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497

Comment 3 ando@openldap.org 2005-08-22 12:25:57 UTC
ando@sys-net.it wrote:

>A revised patch is in
>
>  
>
>>URL: <ftp://ftp.openldap.org/incoming/p.m.2005-08-22.proxied-attributes.2.patch> 
>>    
>>
The revised patch is yet incorrect; please disregard.  The typo is 
minimal, I'm attaching it here because I seem to be temporarily unable 
to upload it to ftp.openldap.org (this bit of diff was reversed in 
<p.m.2005-08-22.proxied-attributes.2.patch>).

<patch>
diff -u -r1.84 ad.c
--- servers/slapd/ad.c  22 Aug 2005 07:46:17 -0000      1.84
+++ servers/slapd/ad.c  22 Aug 2005 07:58:15 -0000
@@ -738,7 +751,7 @@
                ldap_pvt_str2upper( desc->ad_cname.bv_val );

                /* shouldn't we protect this for concurrency? */
-               desc->ad_type = slap_schema.si_at_undefined;
+               desc->ad_type = at;
                ldap_pvt_thread_mutex_lock( &ad_undef_mutex );
                desc->ad_next = desc->ad_type->sat_ad;
                desc->ad_type->sat_ad = desc;
</patch>



    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497

Comment 4 ando@openldap.org 2005-08-25 07:10:37 UTC
ando@sys-net.it wrote:

>>>URL: <ftp://ftp.openldap.org/incoming/p.m.2005-08-25.proxied-attributes.3.patch> 
>>>   
>>>
This is the correct version.  I finally succeeded in uploading it.

p.


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497

Comment 5 ando@openldap.org 2005-08-25 21:58:32 UTC
changed notes
changed state Open to Test
Comment 6 ando@openldap.org 2005-08-29 13:36:26 UTC
moved from Contrib to Software Enhancements
Comment 7 Kurt Zeilenga 2005-08-29 20:24:05 UTC
changed notes
changed state Test to Release
Comment 8 ando@openldap.org 2005-09-02 09:44:16 UTC
changed state Release to Closed
Comment 9 Howard Chu 2009-02-17 04:54:27 UTC
moved from Software Enhancements to Archive.Software Enhancements
Comment 10 OpenLDAP project 2014-08-01 21:06:59 UTC
applied to HEAD/re23