[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#7820) slapo-constraint falsely allows add with count 1



Full_Name: 
Version: 2.4.39
OS: not relevant
URL: 
Submission from: (NULL) (79.219.107.130)


Not sure whether this is a regression caused by the fix for ITS#7773.

Given this constraint:

constraint_attribute
  uid
  count 1
  restrict="ldap:///ou=example??sub?(objectClass=account)"

One can still add two 'uid' values when sending an add request like this:

dn: uid=test1,ou=example
changetype: add
objectClass: account
uid: test2
[..]

Generally I don't like this magic of accepting both attribute values from DN and
entry. :-/