Re: (ITS#7758) slapcat exports entire databases when given a non-existent base

[pierangelo.masarati@polimi.it]

On 12/05/2013 02:22 PM, Frank.Swasey@uvm.edu wrote:
>
> --Apple-Mail=_21ABCED4-5B52-47DB-9CA2-DFB23439A062
> Content-Transfer-Encoding: quoted-printable
> Content-Type: text/plain;
> 	charset=us-ascii
>
> On Dec 4, 2013, at 9:58 PM, quanah@zimbra.com wrote:
>
>> --On Wednesday, December 04, 2013 6:52 PM -0800 Howard Chu =
> <hyc@symas.com>=20
>> wrote:
>> =20
>>> quanah@OpenLDAP.org wrote:
>>>> Full_Name: Quanah Gibson-Mount
>>>> Version: 2.4.35
>>>> OS: Linux 2.6
>>>> URL: ftp://ftp.openldap.org/incoming/
>>>> Submission from: (NULL) (75.111.58.125)
>>>> =20
>>>> =20
>>>> If the root of the primary database is "", and you try and export a =
> base
>>>> that doesn't exist via slapcat, the entire database is exported =
> (i.e.,
>>>> it acts like you specified "" as the base):
>>> =20
>>> Works as designed. -b selects the backend that matches the DN you
>>> provided. A backend with suffix "" matches anything that nothing more
>>> specific matched. If you wanted to filter down to a specific branch, =
> you
>>> should have used -s. Closing this ITS.
>> =20
>> There is no backend matching cn=3Daccesslog.  There is only "" and=20
>> "cn=3Dmonitor" on this particular server.  The goal here was not to =
> export a=20
>> subtree, it was something trying to export the delta-syncrepl =
> accesslog on=20
>> a server that didn't have one.  That should result in an error, not =
> match=20
>> the primary db rooted at "".  I certainly wouldn't expect -n 3 to =
> default=20
>> to -n 1 if -n 3 doesn't exist.  Neither should -b "cn=3Daccesslog" =
> default to=20
>> -b "".  Those clearly do not match.
>
>
> Well, but -b is working as documented.  Sadly, the -s parameter is =
> deprecated - so, that really shouldn't be used either.  Therefore, since =
> -b simply grabs the -n that would contain the suffix specified (doesn't =
> do an exact suffix match and fail if not found as you wanted, Quanah) =
> and -s is deprecated - how is one to accomplish this in the future?

-H, as the man page suggests; -s is deprecated because -H does that and 
more.

p.

>
> Frank
>
> --Apple-Mail=_21ABCED4-5B52-47DB-9CA2-DFB23439A062
> Content-Transfer-Encoding: 7bit
> Content-Disposition: attachment;
> 	filename=signature.asc
> Content-Type: application/pgp-signature;
> 	name=signature.asc
> Content-Description: Message signed with OpenPGP using GPGMail
>
> -----BEGIN PGP SIGNATURE-----
> Comment: GPGTools - http://gpgtools.org
>
> iQIcBAEBAgAGBQJSoH4GAAoJEMOj4l6rFnCNMy0QAIpAf0e2XJ5T6/sX2lnaP+ms
> DCXvsxIRjy5F/vBKT1VLt0Z9pj6N1fSpnwYg66rViyaN2A3I/2BJfhz2u3V6ita7
> /NeGgt2wEuS1OoVtULlapz1OAf91KuEASw7QLff2QmB3yS2Y3YGVom4Yu/h4EC0h
> aEBVKL088gbytJ19mPbRYN+7HYdcbO+QWiMvZER53wSvTV96vkOHFcUcXQf5fj6z
> 7QSMLzA9JUFFjYbYpvdjqtE9UqpPgLRLwIihbzN0DTX6HNavYGWPEzQGrMvvoUoN
> EP4uWNEGzfeV++yE0PiChGHtyqS/Q94nIQ6P815jBxN583oAtxTfIz6nFOyk4hV4
> RhkdpH36z77S1k/KgWbATt5bUvF/wRzIb3pXY0968gC2XHVfh/KzQtLYcOUNCSBG
> yFGbUz9MyBNlicfjlKaDtetHkXUTvS5u8hlx9jO/Ik9L0ZBSzUuWSTQpwt8FXY6T
> WTFjeugu/vqxOrRS2/0yrrrT65Z9MbGt32aKk4QwaZOXDJVAoE5o1WScfQsCeX1G
> 6DBEC/Y1LXgMcOMCs8aKnzQolnMXAiNz1wuMAMDC8ffSYgA34VR4keCKXcmzonKT
> kkiuLCJG2s28vQQrtpwlbnd+OYtAmtBBHcafHZvvYUreap3DlOhbuhbC19QvqCSh
> 9WzShIf7BJeIQW/5xeGk
> =2cju
> -----END PGP SIGNATURE-----
>
> --Apple-Mail=_21ABCED4-5B52-47DB-9CA2-DFB23439A062--
>
>
>
>


-- 
Pierangelo Masarati
Associate Professor
Dipartimento di Scienze e Tecnologie Aerospaziali
Politecnico di Milano