Issue 609 - upper/lower caps in access list
Summary: upper/lower caps in access list
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2000-06-28 21:33 UTC by james@diku.dk
Modified: 2014-08-01 21:06 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description james@diku.dk 2000-06-28 21:33:06 UTC
Full_Name: Claus Norrbohm
Version: openldap-1.2.9-26
OS: SuSE Linux 6.4
URL: 
Submission from: (NULL) (212.242.145.156)


I seam to have a upper/lower caps problem while implementing roaming access 
ith netscape, by trying to follow instructions from an openldap article in
www.linuxworld.com

In slapd.conf below line:

access to dn=".*, ou=Roaming, o=type-this.com, c=DK" by dnattr=owner write

gives rise to following errors:

Jun 29 01:19:03 vulcan slapd[2297]: conn=0 op=20 MOD
dn="NSLIELEMENTTYPE=BOOKMARKS,NSLIPROFILENAME=CLAUS
NORRBOHM,OU=ROAMING,O=TYPE-THIS.COM,C=DK" 
Jun 29 01:19:03 vulcan slapd[2297]: conn=0 op=20 RESULT err=50 tag=103
nentries=0

The err=50 is a access problem ? I think...
Testing different approaches by changing access line in slapd.conf, i found
that:

access to dn=".*,OU=ROAMING,O=TYPE-THIS.COM,C=DK" by dnattr=owner write

works ?!, compare this to the above:

Jun 29 01:23:59 vulcan slapd[2351]: conn=0 op=21 MOD
dn="NSLIELEMENTTYPE=BOOKMARKS,NSLIPROFILENAME=CLAUS
NORRBOHM,OU=ROAMING,O=TYPE-THIS.COM,C=DK"
Jun 29 01:23:59 vulcan slapd[2351]: conn=0 op=21 RESULT err=0 tag=103 nentries=0


Am I missing a point here - I thought that ldap was case insensitive ...
Comment 1 Kurt Zeilenga 2000-06-29 23:33:30 UTC
Case doesn't matter, ACL regex are applied insensitive to
case.  Your problem is that the DN regexes you specified
contained extra spaces.  See examples in the FAQ, archives
of the software mailing list, or in tests/data/slapd-acl.conf.

At 09:33 PM 6/28/00 GMT, james@diku.dk wrote:
>Full_Name: Claus Norrbohm
>Version: openldap-1.2.9-26
>OS: SuSE Linux 6.4
>URL: 
>Submission from: (NULL) (212.242.145.156)
>
>
>I seam to have a upper/lower caps problem while implementing roaming access 
>ith netscape, by trying to follow instructions from an openldap article in
>www.linuxworld.com
>
>In slapd.conf below line:
>
>access to dn=".*, ou=Roaming, o=type-this.com, c=DK" by dnattr=owner write
>
>gives rise to following errors:
>
>Jun 29 01:19:03 vulcan slapd[2297]: conn=0 op=20 MOD
>dn="NSLIELEMENTTYPE=BOOKMARKS,NSLIPROFILENAME=CLAUS
>NORRBOHM,OU=ROAMING,O=TYPE-THIS.COM,C=DK" 
>Jun 29 01:19:03 vulcan slapd[2297]: conn=0 op=20 RESULT err=50 tag=103
>nentries=0
>
>The err=50 is a access problem ? I think...
>Testing different approaches by changing access line in slapd.conf, i found
>that:
>
>access to dn=".*,OU=ROAMING,O=TYPE-THIS.COM,C=DK" by dnattr=owner write
>
>works ?!, compare this to the above:
>
>Jun 29 01:23:59 vulcan slapd[2351]: conn=0 op=21 MOD
>dn="NSLIELEMENTTYPE=BOOKMARKS,NSLIPROFILENAME=CLAUS
>NORRBOHM,OU=ROAMING,O=TYPE-THIS.COM,C=DK"
>Jun 29 01:23:59 vulcan slapd[2351]: conn=0 op=21 RESULT err=0 tag=103 nentries=0
>
>
>Am I missing a point here - I thought that ldap was case insensitive ...
>
>
>
Comment 2 Kurt Zeilenga 2000-06-30 10:11:16 UTC
changed notes
changed state Open to Closed
Comment 3 OpenLDAP project 2014-08-01 21:06:11 UTC
user error