Viewing Development/5792
Full headers

Major security issue: yes  no

Notes:
relax; now conforms to draft fixed in HEAD/re24 released with 2.4.14
Notification:

Date: Wed, 5 Nov 2008 00:09:16 GMT
From: ando@sys-net.it
To: openldap-its@OpenLDAP.org
Subject: structuralObjectClass modification w/ relax not conformant to draft-zeilenga-ldap-relax

Full_Name: Pierangelo Masarati
Version: HEAD
OS: irrelevant
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (81.72.89.40)
Submitted by: ando


Current draft-zeilenga-ldap-relax requires the DSA to modify the
structuralObjectClass attribute of an entry based on modifications of the
structural objectClass of that entry.  Slapd doesn't implement this; in order to
obtain the desired effect, one needs to explicitly modify the
structuralObjectClass attribute accordingly.  This is explicitly forbidden by
draft-zeilenga-ldap-relax.

p.

Followup 1

Date: Thu, 05 Feb 2009 21:09:07 +0100
From: Pierangelo Masarati <ando@sys-net.it>
To: openldap-its@openldap.org
Subject: Re: (ITS#5792) structuralObjectClass modification w/ relax not conformant
 to draft-zeilenga-ldap-relax

This is now fixed in HEAD: modifications to the objectClass attribute 
that change the structural objectClass are automatically reflected by in 
the structuralObjectClass attribute.  What's missing right now is that 
structuralObjectClass should no longer be manageable (I believe).

test037 also needs to be cleaned up.

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------