[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OpenLDAP 2.4

Some minor bits, from browsing the Software Enhancements section of the ITS.
I figured they're relatively obscure and easy to miss, so drawing attention
to them here.

ITS#4554: slapindex option for attribute
you can now give a list of specific attributes to (re)index on the
slapindex command line. This is handy if you've just changed one or two
settings. Of course, this only matters if you're manually editing slapd.conf;
if you change index configurations using cn=config then the background
indexer will take care of it. (This feature is described in the slapindex(8) manpage.)

ITS#4707: for LDAP application developers, a new function ldap_init_fd() has
been added to allow an LDAP session to be created using a socket provided by
the caller. This is useful if the application has particular constraints it
needs to set on the client connection before giving control to libldap. (This function is in the ldap_open(3) manpage.)

ITS#4834: use the dn2id index for extensible filters matching against the
entryDN attribute. This probably only affects a small class of search uses. One example is a search I would use in my LDAP milter for Sendmail - when looking up access rules for an email address, if an exact match for the address isn't found, the code should incrementally peel off domain components until a match is found, or until it reaches an empty domain and no matches were found. E.g., given the email address joe_bob@foo.example.com, the milter does a lookup on
On a failure it might come back with "matchedDN: dc=example,dc=com,<suffix>" and the milter would then pick up the rules in that entry on a 2nd search attempt.

But using an extensible filter, I could get every possible rule in a single search, with a filter like this:

which would return the target entry (if it existed) and all of its parent entries.

Like I said, obscure...
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  Chief Architect, OpenLDAP     http://www.openldap.org/project/