[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#6000) slapadd allows to add entry with empty DN

--On Thursday, March 05, 2009 4:58 PM +0000 ando@sys-net.it wrote:

> Full_Name: Pierangelo Masarati
> Version: HEAD/re24
> OS: irrelevant
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (
> Submitted by: ando
> When slapd is configured to host a database with empty suffix (""), an
> entry with empty DN can be slapadd'ed, but not ldapadd'ed.  I believe the
> latter behavior is appropriate, while the former should be denied.

I disagree.  When you configure a database with "", and you slapcat it, it 
generates the empty suffix entry, which is used to store the contextCSN for 
replication.  You *must* be able to export it and reload it for 
sync-replication.  For example, from slapcat:

objectClass: glue
structuralObjectClass: glue
contextCSN: 20060825091501Z#000000#00#000000
entryCSN: 20060825091501Z#000000#00#000000
modifiersName: uid=zimbra,cn=admins,cn=zimbra
modifyTimestamp: 20060825091501Z
entryUUID: 956a60ba-c8a6-102a-86ac-5d3a048562c0
creatorsName: uid=zimbra,cn=admins,cn=zimbra
createTimestamp: 20060825165749Z



Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
Zimbra ::  the leader in open source messaging and collaboration