[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Concerns with OLC (cn=config) for editing schema, ACLs, and deleting entries
--On Monday, March 19, 2012 11:39 AM -0700 Chris Hiestand
<chiestand@salk.edu> wrote:
Part 1: Readability
I know you veterans are probably sick to death of us late-comers asking
questions about cn=config. I understand but please hear me out because I
feel I have done due diligence; but I still have some concerns with the
transition. Workflow has been discussed before, but I suspect it hasn't
been fleshed out because the switch from editing schema and ACLs in flat
files to LDAP entries reduces readability. I have no problem using
cn=config for most configuration attributes, but it gets a lot less user
friendly when the value is, what used to be in slapd.conf, a multi-line
string. But I could just be missing something. Your help is appreciated.
They were never a multi-line string in slapd.conf, either. You could just
format things to pretend they were multi-line strings.
The LDIF files are a mess because of the way words are split
unpredictably by new lines. You can't use a simple search and replace
with any hope of it working. Readability would be vastly improved with
new lines before keywords (eg to, filter, attrs â) but I don't think
it's possible to have ldapsearch output this way.
Am I just missing workflow techniques or key concepts that improves
readability? Or is your advice to just suck it up and get used to it?
I use Net::LDAP perl module to handle ACL updates. It's quite simple. The
same thing could likely be done in python. Plus replacing an entire ACL in
cn=config is trivial, since you can delete the existing ACL using the {#}
value, and you can insert new ACLs trivially but using a weight of where
you want to insert it.
Part 2: Deleting entries in cn=config
Quanah Gibson-Mount has said entry deletes are coming in 2.5, is that
still the plan? The Roadmap page isn't specific.
You can optionally enable this at build time in OpenLDAP 2.4.30 for
testing. As it is an experimental feature, YMMV.
--Quanah
--
Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration