Re: (ITS#7758) slapcat exports entire databases when given a non-existent base

[Frank.Swasey@uvm.edu]

--Apple-Mail=_21ABCED4-5B52-47DB-9CA2-DFB23439A062
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

On Dec 4, 2013, at 9:58 PM, quanah@zimbra.com wrote:

> --On Wednesday, December 04, 2013 6:52 PM -0800 Howard Chu =
<hyc@symas.com>=20
> wrote:
>=20
>> quanah@OpenLDAP.org wrote:
>>> Full_Name: Quanah Gibson-Mount
>>> Version: 2.4.35
>>> OS: Linux 2.6
>>> URL: ftp://ftp.openldap.org/incoming/
>>> Submission from: (NULL) (75.111.58.125)
>>>=20
>>>=20
>>> If the root of the primary database is "", and you try and export a =
base
>>> that doesn't exist via slapcat, the entire database is exported =
(i.e.,
>>> it acts like you specified "" as the base):
>>=20
>> Works as designed. -b selects the backend that matches the DN you
>> provided. A backend with suffix "" matches anything that nothing more
>> specific matched. If you wanted to filter down to a specific branch, =
you
>> should have used -s. Closing this ITS.
>=20
> There is no backend matching cn=3Daccesslog.  There is only "" and=20
> "cn=3Dmonitor" on this particular server.  The goal here was not to =
export a=20
> subtree, it was something trying to export the delta-syncrepl =
accesslog on=20
> a server that didn't have one.  That should result in an error, not =
match=20
> the primary db rooted at "".  I certainly wouldn't expect -n 3 to =
default=20
> to -n 1 if -n 3 doesn't exist.  Neither should -b "cn=3Daccesslog" =
default to=20
> -b "".  Those clearly do not match.


Well, but -b is working as documented.  Sadly, the -s parameter is =
deprecated - so, that really shouldn't be used either.  Therefore, since =
-b simply grabs the -n that would contain the suffix specified (doesn't =
do an exact suffix match and fail if not found as you wanted, Quanah) =
and -s is deprecated - how is one to accomplish this in the future?

Frank

--Apple-Mail=_21ABCED4-5B52-47DB-9CA2-DFB23439A062
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
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=2cju
-----END PGP SIGNATURE-----

--Apple-Mail=_21ABCED4-5B52-47DB-9CA2-DFB23439A062--