gmane.linux.redhat.fedora.directory.devel

please review ticket#28 - MOD operations with chained delete/add get back error 53 on backend config

Mark Reynolds — 2012-05-25T20:46:12

https://fedorahosted.org/389/ticket/28

https://fedorahosted.org/389/attachment/ticket/28/0001-Ticket-28-MOD-operations-with-chained-delete-add-get.patch

Thanks,
Mark
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: fix coverity issues with uninit vals,no return checking

Rich Megginson — 2012-05-25T18:41:12


--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: Ticket #383 - usn + mmr = deletions arenot replicated

Rich Megginson — 2012-05-24T19:58:46

https://fedorahosted.org/389/ticket/383

https://fedorahosted.org/389/attachment/ticket/383/0003-Ticket-383-usn-mmr-deletions-are-not-replicated.patch
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: Ticket #382 - DS Shuts downintermittently

Rich Megginson — 2012-05-23T01:27:41

https://fedorahosted.org/389/ticket/382

https://fedorahosted.org/389/attachment/ticket/382/0001-Ticket-382-DS-Shuts-down-intermittently.patch
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

please review ticket #110 - RFE - limiting Directory Manager (nsslapd-rootdn) bind access by source host

Mark Reynolds — 2012-05-21T21:36:10

https://fedorahosted.org/389/ticket/110

https://fedorahosted.org/389/attachment/ticket/110/0001-Ticket-110-RFE-limiting-root-DN-by-host-IP-time-of-d.patch

Thanks,
Mark
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: Ticket #360 - ldapmodify returnsOperations error

Rich Megginson — 2012-05-21T17:10:54

https://fedorahosted.org/389/ticket/360

https://fedorahosted.org/389/attachment/ticket/360/0001-Ticket-360-ldapmodify-returns-Operations-error.patch
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: Ticket #321 - krbExtraData is being null modified and replicated on each ssh login

Rich Megginson — 2012-05-21T15:11:26

https://fedorahosted.org/389/ticket/321

https://fedorahosted.org/389/attachment/ticket/321/0001-Ticket-321-krbExtraData-is-being-null-modified-and-r.2.patch
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress

Rich Megginson — 2012-05-18T21:18:40

I found a small mem leak
https://fedorahosted.org/389/ticket/359

https://fedorahosted.org/389/attachment/ticket/359/0001-Trac-Ticket-359-Database-RUV-could-mismatch-the-one-.patch
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

please review ticket #321 - krbExtraData is being null modified and replicated on each ssh login

Mark Reynolds — 2012-05-17T20:34:32

https://fedorahosted.org/389/ticket/321

https://fedorahosted.org/389/attachment/ticket/321/0001-Ticket-321-krbExtraData-is-being-null-modified-and-r.patch

Thanks,
Mark
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

please review Ticket #365 - password in clear text inaudit log

Mark Reynolds — 2012-05-16T21:57:26

https://fedorahosted.org/389/ticket/365

https://fedorahosted.org/389/attachment/ticket/365/0001-Ticket-365-passwords-in-clear-text-in-the-audit-log.patch

Thanks,
Mark
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

please review ticket 368 - Make the CLEANALLRUV taskone step

Mark Reynolds — 2012-05-16T14:37:57

https://fedorahosted.org/389/ticket/368

https://fedorahosted.org/389/attachment/ticket/368/0001-Ticket-368-Make-the-cleanAllRUV-task-one-step.patch

Thanks,
Mark
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

please review ticket 367 - Invalid chaining config triggers a disk full error and shutdown

Mark Reynolds — 2012-05-11T17:07:41

https://fedorahosted.org/389/ticket/367

https://fedorahosted.org/389/attachment/ticket/367/0001-Ticket-367-Invalid-chaining-config-triggers-a-disk-f.patch

Note:  I also did some code cleanup with indentation, but the the fix is 
just to return -1, instead of LDAP_LOCAL_ERROR(-2).

Thanks,
Mark
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

please review ticket #218 - Make RI Plugin work withreplicated entries

Mark Reynolds — 2012-05-10T18:45:26

https://fedorahosted.org/389/ticket/218

https://fedorahosted.org/389/attachment/ticket/218/0001-Ticket-218-Make-RI-Plugin-worked-with-replicated-upd.patch

The diff is very large because I redid all the indentation in referint.c 
(it was a mess!)

The changes to look at are in:

referint_postop_init()
referint_postop_del()
referint_postop_modrdn()
_do_modify()

and

repl5_plugins.c


Thanks,
Mark

--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

please review ticket #356 - RFE logconv.pl - Track BindInfo

Mark Reynolds — 2012-05-09T16:27:45

https://fedorahosted.org/389/ticket/356

https://fedorahosted.org/389/attachment/ticket/356/0001-Ticket-356-RFE-Track-bind-info.patch

Thanks,
Mark
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

please review ticket 196 - Interpret IPV6 addresses for ACIs, replication, and chaining

Mark Reynolds — 2012-05-08T15:50:26

https://fedorahosted.org/389/ticket/196/

https://fedorahosted.org/389/attachment/ticket/196/0001-Ticket-196-RFE-Interpret-IPV6-addresses-for-ACIs-rep.patch

Thanks,
Mark
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: Ticket #358 - managed entry doesn't delete linked entry

Rich Megginson — 2012-05-05T03:08:08

This patch passes entryusn, dna, managedentry, automember, 
memofenhancement, and linkedattrs tests.  I'm running a full acceptance 
test now.  Please let me know if you see any problems.

https://fedorahosted.org/389/ticket/358

https://fedorahosted.org/389/attachment/ticket/358/0001-Ticket-358-managed-entry-doesn-t-delete-linked-entry.patch


--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

winsync syncs deletions of AD entries that are out ofscope

Rich Megginson — 2012-05-04T17:25:50

This came up during extended testing for 
https://fedorahosted.org/389/ticket/355

steps:
1) make a ds user and an ad user that are in sync - verify ad changes go 
to ds and vice versa
2) move the ad user out of scope of the sync agreement
3) verify that sync is not working - verify ad changes don't go to ds 
and vice versa
4) delete the ad user - the ds user is also deleted

Before the fix for ticket 355, moving the AD entry out of scope would 
delete the DS entry - but that was problematic - if you mis-configured 
your sync agreement, all of your DS users could be accidentally deleted

This seems counter-intuitive - the entries are not in sync, yet the 
deletion is synced.  This is because we do not look at the scope of the 
AD tombstone entry prior to deletion, and test it using 
is_subject_of_agreement_remote(e,prp->agmt)

We could look at the AD tombstone to see if was in scope - the AD 
tombstone (with 2008 anyway) provides the attribute "lastknownparent":

(gdb) p *e->e_attrs->a_next->a_next->a_next->a_next->a_next
$27 = {a_type = 0x7fffc0056bb0 "lastknownparent", a_present_values = {
     va = 0x7fffc00563b0}, a_flags = 4, a_plugin = 0x6c85a0,
   a_deleted_values = {va = 0x0}, a_listtofree = 0x0, a_next = 
0x7fffc0059450,
   a_deletioncsn = 0x0, a_mr_eq_plugin = 0x690240, a_mr_ord_plugin = 0x0,
   a_mr_sub_plugin = 0x0}
(gdb) p 
*e->e_attrs->a_next->a_next->a_next->a_next->a_next->a_present_values.va[0]
$28 = {bv = {bv_len = 36,
     bv_val = 0x7fffc0067470 "CN=deletedusers,DC=testdomain,DC=com"},
   v_csnset = 0x0, v_flags = 0}

So, in this case, if we used lastknownparent, we would see that the 
entry was outside of the scope of the agreement (the sync subtree is 
cn=testusers,dc=testdomain,dc=com).

Question: In light of 355 changing the behavior - should we use 
lastknownparent to see if the tombstone is out of the scope of the 
agreement, and not delete the DS entry if so?

--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: Ticket #355 - winsync should not delete entry that appears to be out of scope

Rich Megginson — 2012-05-03T20:39:53

https://fedorahosted.org/389/ticket/355

https://fedorahosted.org/389/attachment/ticket/355/0001-Ticket-355-winsync-should-not-delete-entry-that-appe.patch
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

389-ds-base-1.2.11 is branched

Rich Megginson — 2012-05-02T19:03:10

I pushed the 389-ds-base-1.2.11 branch and released 389-ds-base-1.2.11.1
Unless you have fixes that are required to get into 1.2.11, just 
continue to use master

--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return

Rich Megginson — 2012-05-02T15:20:36

https://fedorahosted.org/389/ticket/353

https://fedorahosted.org/389/attachment/ticket/353/0001-Ticket-353-coverity-12625-12629-leaks-dead-code-unch.patch
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel

Please review: Ticket #351 - use betxn plugins bydefault

Rich Megginson — 2012-05-02T00:18:49

https://fedorahosted.org/389/ticket/351

https://fedorahosted.org/389/attachment/ticket/351/0001-Ticket-351-use-betxn-plugins-by-default.patch
--
389-devel mailing list
389-devel< at >lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel