Re: (ITS#4442) slapo-refint does not prohibit deletion of entry

[ando@sys-net.it]

On Fri, 2006-03-17 at 10:03 +0000, michael@stroeder.com wrote:

> I'm using slapo-refint *without* configuration directive refint_nothing.
> 
> Although I'm deleting an entry whose DN is an attribute value of a MUST
> attribute in another entry and both the error code and the log messages indicate
> that this is not allowed the entry is deleted.

Actually, slapo-refint is not supposed to prevent those deletes, it
simply logs that they break referential integrity.  To prevent those
operations would require heavy reworking of the overlay and break the
model it relies on - that is: do the modifications requested by the
user; then do the best that it can to take care of referential
integrity, or note when it cannot be preserved. 

In any case, since operations can occur any time, and the writes
involved in referential integrity enforcing are not transactional,
nothing prevents it from being broken by concurrent operations that
create references to an object while it's being deleted, so the overlay
wouldn't be able to guarantee it anyway...

I'd rather see your ITS as a feature request for reworking the overlay
in order to be more strict in trying to enforce referential integrity,
yet with no guarantee (at least until transactions are implemented).

p.




Ing. Pierangelo Masarati
Responsabile Open Solution
OpenLDAP Core Team

SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
------------------------------------------
Office:   +39.02.23998309          
Mobile:   +39.333.4963172
Email:    pierangelo.masarati@sys-net.it
------------------------------------------