[389-ds-base] branch master updated: Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
mreynolds pushed a commit to branch master
in repository 389-ds-base.
The following commit(s) were added to refs/heads/master by this push:
new 41c30fd Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
41c30fd is described below
commit 41c30fd557d4cc0aaaf8a9f7767d37746f4c4bc4
Author: Mark Reynolds <mreynolds(a)redhat.com>
AuthorDate: Wed May 15 16:04:55 2019 -0400
Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
Description: When the client is a IPv6 client, any ACI's that contain bind rules
for IPv4 addresses essentially break that aci causing it to not be
fully evaluated.
For example we have an aci like this:
aci: (targetattr != "aci")(version 3.0; aci "rootdse anon read access"; allow(
read,search,compare) userdn="ldap:///anyone" and
(ip="127.0.0.1" or ip="2620:52:0:84:f816:3eff:fe4b:4f35");)
So when the client is IPv6 we start processing the IP addresses in
the ACI, as soon as a IPv4 address is found the ACI evaluation stops
and in this case the IPv6 address is never checked and access is denied.
The problem is that we set the wrong return code variable in libaccess
https://pagure.io/389-ds-base/issue/50378
Reviewed by: mreynolds (one line commit rule)
---
lib/libaccess/lasip.cpp | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/lib/libaccess/lasip.cpp b/lib/libaccess/lasip.cpp
index eea7aff..30c546d 100644
--- a/lib/libaccess/lasip.cpp
+++ b/lib/libaccess/lasip.cpp
@@ -598,7 +598,7 @@ int LASIpEval(NSErr_t *errp, char *attr_name, CmpOp_t comparator,
node = context->treetop_ipv6;
if ( node == NULL ) {
- retcode = (comparator == CMP_OP_EQ ? LAS_EVAL_FALSE : LAS_EVAL_TRUE);
+ rc = (comparator == CMP_OP_EQ ? LAS_EVAL_FALSE : LAS_EVAL_TRUE);
} else {
addr = PR_ntohs( ipv6->_S6_un._S6_u16[field]);
for (bit = 127; bit >= 0 ; bit--, bit_position--) {
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months
[389-ds-base] branch 389-ds-base-1.3.8 updated: Ticket 50370 - CleanAllRUV task crashing during server shutdown
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
mreynolds pushed a commit to branch 389-ds-base-1.3.8
in repository 389-ds-base.
The following commit(s) were added to refs/heads/389-ds-base-1.3.8 by this push:
new 0419128 Ticket 50370 - CleanAllRUV task crashing during server shutdown
0419128 is described below
commit 0419128fe0b93714dc43d8de78b91a00583f4d7c
Author: Mark Reynolds <mreynolds(a)redhat.com>
AuthorDate: Tue May 14 13:58:42 2019 -0400
Ticket 50370 - CleanAllRUV task crashing during server shutdown
Description: There is a race condition during server shutdown that
can cause the server to crash. Increment the active
thread count for each cleaning task to prevent the plugins
from being closed before the thread terminates.
https://pagure.io/389-ds-base/issue/50370
Reviewed by: firstyear(Thanks!)
(cherry picked from commit 7141b8d10382e8dcb8528b57e5226c82506b79b9)
---
ldap/servers/plugins/replication/repl5_replica_config.c | 14 ++++++++++++--
1 file changed, 12 insertions(+), 2 deletions(-)
diff --git a/ldap/servers/plugins/replication/repl5_replica_config.c b/ldap/servers/plugins/replication/repl5_replica_config.c
index a952b68..b4aff9e 100644
--- a/ldap/servers/plugins/replication/repl5_replica_config.c
+++ b/ldap/servers/plugins/replication/repl5_replica_config.c
@@ -1630,9 +1630,13 @@ replica_cleanallruv_thread(void *arg)
int aborted = 0;
int rc = 0;
- if (!data) {
+ if (!data || slapi_is_shutting_down()) {
return; /* no data */
}
+
+ /* Increase active thread count to prevent a race condition at server shutdown */
+ g_incr_active_threadcnt();
+
if (data->task) {
slapi_task_inc_refcount(data->task);
slapi_log_err(SLAPI_LOG_PLUGIN, repl_plugin_name,
@@ -1912,6 +1916,7 @@ done:
slapi_ch_free_string(&data->force);
slapi_ch_free_string(&rid_text);
slapi_ch_free((void **)&data);
+ g_decr_active_threadcnt();
}
/*
@@ -3005,9 +3010,13 @@ replica_abort_task_thread(void *arg)
int release_it = 0;
int count = 0, rc = 0;
- if (!data) {
+ if (!data || slapi_is_shutting_down()) {
return; /* no data */
}
+
+ /* Increase active thread count to prevent a race condition at server shutdown */
+ g_incr_active_threadcnt();
+
if (data->task) {
slapi_task_inc_refcount(data->task);
slapi_log_err(SLAPI_LOG_PLUGIN, repl_plugin_name, "replica_abort_task_thread --> refcount incremented.\n");
@@ -3134,6 +3143,7 @@ done:
slapi_ch_free_string(&data->certify);
slapi_sdn_free(&data->sdn);
slapi_ch_free((void **)&data);
+ g_decr_active_threadcnt();
}
static int
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months
[389-ds-base] branch 389-ds-base-1.3.9 updated: Ticket 50370 - CleanAllRUV task crashing during server shutdown
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
mreynolds pushed a commit to branch 389-ds-base-1.3.9
in repository 389-ds-base.
The following commit(s) were added to refs/heads/389-ds-base-1.3.9 by this push:
new 0a8a7b3 Ticket 50370 - CleanAllRUV task crashing during server shutdown
0a8a7b3 is described below
commit 0a8a7b377be61e422b9c2f05ca456db10ebd1307
Author: Mark Reynolds <mreynolds(a)redhat.com>
AuthorDate: Tue May 14 13:58:42 2019 -0400
Ticket 50370 - CleanAllRUV task crashing during server shutdown
Description: There is a race condition during server shutdown that
can cause the server to crash. Increment the active
thread count for each cleaning task to prevent the plugins
from being closed before the thread terminates.
https://pagure.io/389-ds-base/issue/50370
Reviewed by: firstyear(Thanks!)
(cherry picked from commit 7141b8d10382e8dcb8528b57e5226c82506b79b9)
---
ldap/servers/plugins/replication/repl5_replica_config.c | 14 ++++++++++++--
1 file changed, 12 insertions(+), 2 deletions(-)
diff --git a/ldap/servers/plugins/replication/repl5_replica_config.c b/ldap/servers/plugins/replication/repl5_replica_config.c
index a952b68..b4aff9e 100644
--- a/ldap/servers/plugins/replication/repl5_replica_config.c
+++ b/ldap/servers/plugins/replication/repl5_replica_config.c
@@ -1630,9 +1630,13 @@ replica_cleanallruv_thread(void *arg)
int aborted = 0;
int rc = 0;
- if (!data) {
+ if (!data || slapi_is_shutting_down()) {
return; /* no data */
}
+
+ /* Increase active thread count to prevent a race condition at server shutdown */
+ g_incr_active_threadcnt();
+
if (data->task) {
slapi_task_inc_refcount(data->task);
slapi_log_err(SLAPI_LOG_PLUGIN, repl_plugin_name,
@@ -1912,6 +1916,7 @@ done:
slapi_ch_free_string(&data->force);
slapi_ch_free_string(&rid_text);
slapi_ch_free((void **)&data);
+ g_decr_active_threadcnt();
}
/*
@@ -3005,9 +3010,13 @@ replica_abort_task_thread(void *arg)
int release_it = 0;
int count = 0, rc = 0;
- if (!data) {
+ if (!data || slapi_is_shutting_down()) {
return; /* no data */
}
+
+ /* Increase active thread count to prevent a race condition at server shutdown */
+ g_incr_active_threadcnt();
+
if (data->task) {
slapi_task_inc_refcount(data->task);
slapi_log_err(SLAPI_LOG_PLUGIN, repl_plugin_name, "replica_abort_task_thread --> refcount incremented.\n");
@@ -3134,6 +3143,7 @@ done:
slapi_ch_free_string(&data->certify);
slapi_sdn_free(&data->sdn);
slapi_ch_free((void **)&data);
+ g_decr_active_threadcnt();
}
static int
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months
[389-ds-base] branch 389-ds-base-1.4.0 updated: Ticket 50370 - CleanAllRUV task crashing during server shutdown
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
mreynolds pushed a commit to branch 389-ds-base-1.4.0
in repository 389-ds-base.
The following commit(s) were added to refs/heads/389-ds-base-1.4.0 by this push:
new 4470744 Ticket 50370 - CleanAllRUV task crashing during server shutdown
4470744 is described below
commit 44707447a17b30e956922776c8459a892220a332
Author: Mark Reynolds <mreynolds(a)redhat.com>
AuthorDate: Tue May 14 13:58:42 2019 -0400
Ticket 50370 - CleanAllRUV task crashing during server shutdown
Description: There is a race condition during server shutdown that
can cause the server to crash. Increment the active
thread count for each cleaning task to prevent the plugins
from being closed before the thread terminates.
https://pagure.io/389-ds-base/issue/50370
Reviewed by: firstyear(Thanks!)
(cherry picked from commit 7141b8d10382e8dcb8528b57e5226c82506b79b9)
---
ldap/servers/plugins/replication/repl5_replica_config.c | 14 ++++++++++++--
1 file changed, 12 insertions(+), 2 deletions(-)
diff --git a/ldap/servers/plugins/replication/repl5_replica_config.c b/ldap/servers/plugins/replication/repl5_replica_config.c
index eb92a9d..02b645f 100644
--- a/ldap/servers/plugins/replication/repl5_replica_config.c
+++ b/ldap/servers/plugins/replication/repl5_replica_config.c
@@ -1677,9 +1677,13 @@ replica_cleanallruv_thread(void *arg)
int aborted = 0;
int rc = 0;
- if (!data) {
+ if (!data || slapi_is_shutting_down()) {
return; /* no data */
}
+
+ /* Increase active thread count to prevent a race condition at server shutdown */
+ g_incr_active_threadcnt();
+
if (data->task) {
slapi_task_inc_refcount(data->task);
slapi_log_err(SLAPI_LOG_PLUGIN, repl_plugin_name,
@@ -1959,6 +1963,7 @@ done:
slapi_ch_free_string(&data->force);
slapi_ch_free_string(&rid_text);
slapi_ch_free((void **)&data);
+ g_decr_active_threadcnt();
}
/*
@@ -3051,9 +3056,13 @@ replica_abort_task_thread(void *arg)
int release_it = 0;
int count = 0, rc = 0;
- if (!data) {
+ if (!data || slapi_is_shutting_down()) {
return; /* no data */
}
+
+ /* Increase active thread count to prevent a race condition at server shutdown */
+ g_incr_active_threadcnt();
+
if (data->task) {
slapi_task_inc_refcount(data->task);
slapi_log_err(SLAPI_LOG_PLUGIN, repl_plugin_name, "replica_abort_task_thread --> refcount incremented.\n");
@@ -3180,6 +3189,7 @@ done:
slapi_ch_free_string(&data->certify);
slapi_sdn_free(&data->sdn);
slapi_ch_free((void **)&data);
+ g_decr_active_threadcnt();
}
static int
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months
[389-ds-base] branch 389-ds-base-1.4.0 updated: Ticket 50340 cont - structs for disabled plugins will not be freed
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
lkrispen pushed a commit to branch 389-ds-base-1.4.0
in repository 389-ds-base.
The following commit(s) were added to refs/heads/389-ds-base-1.4.0 by this push:
new 8ea3643 Ticket 50340 cont - structs for disabled plugins will not be freed
8ea3643 is described below
commit 8ea36434965a6e60ad9e8803f711adfb799594e2
Author: Ludwig Krispenz <lkrispen(a)redhat.com>
AuthorDate: Tue May 14 11:38:53 2019 +0200
Ticket 50340 cont - structs for disabled plugins will not be freed
Bug: The original fix did free structs for not enabled plugins, but
they remained in the depenendency list of plugins and when the
list was processed a freed struct could be accessed
Fix: do not add a disabled plugin to the plugin dependency list
Reviewed by: Mark, thanks
---
ldap/servers/slapd/plugin.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/ldap/servers/slapd/plugin.c b/ldap/servers/slapd/plugin.c
index 601a012..7dfab84 100644
--- a/ldap/servers/slapd/plugin.c
+++ b/ldap/servers/slapd/plugin.c
@@ -3031,7 +3031,7 @@ plugin_setup(Slapi_Entry *plugin_entry, struct slapi_componentid *group, slapi_p
add_plugin_entry_dn(dn_copy);
}
- if (add_entry) {
+ if (add_entry && enabled) {
/* make a copy of the plugin entry for our own use because it will
be freed later by the caller */
Slapi_Entry *e_copy = slapi_entry_dup(plugin_entry);
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months
[389-ds-base] branch master updated: Ticket 50340 cont - structs for disabled plugins will not be freed
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
lkrispen pushed a commit to branch master
in repository 389-ds-base.
The following commit(s) were added to refs/heads/master by this push:
new 505b563 Ticket 50340 cont - structs for disabled plugins will not be freed
505b563 is described below
commit 505b563de7d028360d860b257f3559944e18f26c
Author: Ludwig Krispenz <lkrispen(a)redhat.com>
AuthorDate: Tue May 14 11:38:53 2019 +0200
Ticket 50340 cont - structs for disabled plugins will not be freed
Bug: The original fix did free structs for not enabled plugins, but
they remained in the depenendency list of plugins and when the
list was processed a freed struct could be accessed
Fix: do not add a disabled plugin to the plugin dependency list
Reviewed by: Mark, thanks
---
ldap/servers/slapd/plugin.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/ldap/servers/slapd/plugin.c b/ldap/servers/slapd/plugin.c
index 601a012..7dfab84 100644
--- a/ldap/servers/slapd/plugin.c
+++ b/ldap/servers/slapd/plugin.c
@@ -3031,7 +3031,7 @@ plugin_setup(Slapi_Entry *plugin_entry, struct slapi_componentid *group, slapi_p
add_plugin_entry_dn(dn_copy);
}
- if (add_entry) {
+ if (add_entry && enabled) {
/* make a copy of the plugin entry for our own use because it will
be freed later by the caller */
Slapi_Entry *e_copy = slapi_entry_dup(plugin_entry);
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months
[389-ds-base] branch master updated: Fix missing import
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
vashirov pushed a commit to branch master
in repository 389-ds-base.
The following commit(s) were added to refs/heads/master by this push:
new fa74996 Fix missing import
fa74996 is described below
commit fa74996f6e56c5035dc5e8392f4117aad944ee8e
Author: Viktor Ashirov <vashirov(a)redhat.com>
AuthorDate: Tue May 14 10:24:15 2019 +0200
Fix missing import
Reviewed by: one line commit rule
---
dirsrvtests/tests/suites/setup_ds/dscreate_test.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/dirsrvtests/tests/suites/setup_ds/dscreate_test.py b/dirsrvtests/tests/suites/setup_ds/dscreate_test.py
index 1c98b2a..b8a73dd 100644
--- a/dirsrvtests/tests/suites/setup_ds/dscreate_test.py
+++ b/dirsrvtests/tests/suites/setup_ds/dscreate_test.py
@@ -15,6 +15,7 @@ from lib389.instance.setup import SetupDs
from lib389.instance.remove import remove_ds_instance
from lib389.instance.options import General2Base, Slapd2Base
from lib389._constants import *
+from lib389.utils import ds_is_older
import tempfile
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months
[389-ds-base] branch 389-ds-base-1.3.9 updated: Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
mreynolds pushed a commit to branch 389-ds-base-1.3.9
in repository 389-ds-base.
The following commit(s) were added to refs/heads/389-ds-base-1.3.9 by this push:
new 25c704a Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
25c704a is described below
commit 25c704a4a1c375cae2feb01ddf25a4eb2ce30c36
Author: Mark Reynolds <mreynolds(a)redhat.com>
AuthorDate: Mon May 13 10:03:58 2019 -0400
Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
Bug Description: If for some reason an entry's multi-valued attribute
values are in different orders on different replicas
the tool reports this as an inconsistency when it is
not.
Fix Description: For both offline & online processing sort each entry's
multi-valued attribute values.
https://pagure.io/389-ds-base/issue/50363
Reviewed by: firstyear & mhonek (Thanks!!)
---
ldap/admin/src/scripts/ds-replcheck | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/ldap/admin/src/scripts/ds-replcheck b/ldap/admin/src/scripts/ds-replcheck
index 57748b0..a9411cb 100755
--- a/ldap/admin/src/scripts/ds-replcheck
+++ b/ldap/admin/src/scripts/ds-replcheck
@@ -110,7 +110,7 @@ def convert_entries(entries):
for entry in entries:
new_entry = Entry(entry)
- new_entry.data = {k.lower(): v for k, v in list(new_entry.data.items())}
+ new_entry.data = {k.lower(): sorted(v) for k, v in list(new_entry.data.items())}
if new_entry.dn.endswith("cn=mapping tree,cn=config"):
'''Skip replica entry (ldapsearch brings this in because the filter
we use triggers an internal operation to return the config entry - so
@@ -381,6 +381,11 @@ def ldif_search(LDIF, dn):
# Keep track of entry index - we use this later when searching the LDIF again
result['idx'] = count
+ # Sort all the multi-valued attributes
+ for k, v in data.items():
+ v.sort()
+ data[k] = v
+
result['glue'] = None
if found_conflict and found_subentry and found_tombstone is False:
result['entry'] = None
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months
[389-ds-base] branch 389-ds-base-1.4.0 updated: Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
mreynolds pushed a commit to branch 389-ds-base-1.4.0
in repository 389-ds-base.
The following commit(s) were added to refs/heads/389-ds-base-1.4.0 by this push:
new f319203 Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
f319203 is described below
commit f319203921fd9ba7496360dcc3f5d65a77eee405
Author: Mark Reynolds <mreynolds(a)redhat.com>
AuthorDate: Fri May 10 16:57:42 2019 -0400
Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
Bug Description: If for some reason an entry's multi-valued attribute
values are in different orders on different replicas
the tool reports this as an inconsistency when it is
not.
Fix Description: For both offline & online processing sort each entry's
multi-valued attribute values.
https://pagure.io/389-ds-base/issue/50363
Reviewed by: firstyear & mhonek (Thanks!!)
(cherry picked from commit 974c802fceb429315bf799805917a208b44c4917)
---
dirsrvtests/tests/suites/ds_tools/replcheck_test.py | 9 +++++++++
ldap/admin/src/scripts/ds-replcheck | 7 ++++++-
2 files changed, 15 insertions(+), 1 deletion(-)
diff --git a/dirsrvtests/tests/suites/ds_tools/replcheck_test.py b/dirsrvtests/tests/suites/ds_tools/replcheck_test.py
index 27b8c31..c8954a5 100644
--- a/dirsrvtests/tests/suites/ds_tools/replcheck_test.py
+++ b/dirsrvtests/tests/suites/ds_tools/replcheck_test.py
@@ -341,6 +341,8 @@ def test_inconsistencies(topo_tls_ldapi):
m2 = topo_tls_ldapi.ms["master2"]
attr_m1 = "m1_inconsistency"
attr_m2 = "m2_inconsistency"
+ attr_first = "first ordered valued"
+ attr_second = "second ordered valued"
attr_m1_only = "123123123"
try:
@@ -353,6 +355,9 @@ def test_inconsistencies(topo_tls_ldapi):
user_m1.set("description", attr_m1)
user_m2.set("description", attr_m2)
user_m1.set("telephonenumber", attr_m1_only)
+ # Add the same multi-valued attrs, but out of order
+ user_m1.set("cn", [attr_first, attr_second])
+ user_m2.set("cn", [attr_second, attr_first])
time.sleep(2)
for tool_cmd in replcheck_cmd_list(topo_tls_ldapi):
@@ -360,12 +365,16 @@ def test_inconsistencies(topo_tls_ldapi):
assert attr_m1 in result
assert attr_m2 in result
assert attr_m1_only in result
+ assert attr_first not in result
+ assert attr_second not in result
# Ignore some attributes and check the output
tool_cmd.extend(['-i', '{},{}'.format('description', 'telephonenumber')])
result = subprocess.check_output(tool_cmd, encoding='utf-8').lower()
assert attr_m1 not in result
assert attr_m2 not in result
assert attr_m1_only not in result
+ assert attr_first not in result
+ assert attr_second not in result
finally:
topo_tls_ldapi.resume_all_replicas()
diff --git a/ldap/admin/src/scripts/ds-replcheck b/ldap/admin/src/scripts/ds-replcheck
index 72527aa..5d7295e 100755
--- a/ldap/admin/src/scripts/ds-replcheck
+++ b/ldap/admin/src/scripts/ds-replcheck
@@ -125,7 +125,7 @@ def convert_entries(entries):
for entry in entries:
new_entry = Entry(entry)
- new_entry.data = {k.lower(): v for k, v in list(new_entry.data.items())}
+ new_entry.data = {k.lower(): sorted(v) for k, v in list(new_entry.data.items())}
# Decode nscpentrywsi bytes values for future use
nscpentrywsi_list = []
@@ -448,6 +448,11 @@ def ldif_search(LDIF, dn):
# Keep track of entry index - we use this later when searching the LDIF again
result['idx'] = count
+ # Sort all the multi-valued attributes
+ for k, v in data.items():
+ v.sort()
+ data[k] = v
+
result['glue'] = None
if found_conflict and found_subentry and found_tombstone is False:
result['entry'] = None
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months
[389-ds-base] branch 389-ds-base-1.3.9 updated: Ticket 49866 - Add passwordSendExpiringTime to objectclass
by pagure＠pagure.io
This is an automated email from the git hooks/post-receive script.
mreynolds pushed a commit to branch 389-ds-base-1.3.9
in repository 389-ds-base.
The following commit(s) were added to refs/heads/389-ds-base-1.3.9 by this push:
new d08102c Ticket 49866 - Add passwordSendExpiringTime to objectclass
d08102c is described below
commit d08102cb52b6d409d4287ffc937ba2a6128209a5
Author: Mark Reynolds <mreynolds(a)redhat.com>
AuthorDate: Fri May 10 10:55:28 2019 -0400
Ticket 49866 - Add passwordSendExpiringTime to objectclass
Description: add the expringtime attribute to the passwordPolicy objectclass
https://pagure.io/389-ds-base/issue/49866
Reviewed by: mreynolds(one line commit rule)
---
ldap/schema/02common.ldif | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/ldap/schema/02common.ldif b/ldap/schema/02common.ldif
index 70d64c0..b44e860 100644
--- a/ldap/schema/02common.ldif
+++ b/ldap/schema/02common.ldif
@@ -142,7 +142,7 @@ objectClasses: ( 2.16.840.1.113730.3.2.7 NAME 'nsLicenseUser' DESC 'Netscape def
objectClasses: ( 2.16.840.1.113730.3.2.1 NAME 'changeLogEntry' DESC 'LDAP changelog objectclass' SUP top MUST ( targetdn $ changeTime $ changenumber $ changeType ) MAY ( changes $ newrdn $ deleteoldrdn $ newsuperior ) X-ORIGIN 'Changelog Internet Draft' )
objectClasses: ( 2.16.840.1.113730.3.2.6 NAME 'referral' DESC 'LDAP referrals objectclass' SUP top MAY ( ref ) X-ORIGIN 'LDAPv3 referrals Internet Draft' )
objectClasses: ( 2.16.840.1.113730.3.2.12 NAME 'passwordObject' DESC 'Netscape defined password policy objectclass' SUP top MAY ( pwdpolicysubentry $ passwordExpirationTime $ passwordExpWarned $ passwordRetryCount $ retryCountResetTime $ accountUnlockTime $ passwordHistory $ passwordAllowChangeTime $ passwordGraceUserTime ) X-ORIGIN 'Netscape Directory Server' )
-objectClasses: ( 2.16.840.1.113730.3.2.13 NAME 'passwordPolicy' DESC 'Netscape defined password policy objectclass' SUP top MAY ( passwordMaxAge $ passwordExp $ passwordMinLength $ passwordKeepHistory $ passwordInHistory $ passwordChange $ passwordWarning $ passwordLockout $ passwordMaxFailure $ passwordResetDuration $ passwordUnlock $ passwordLockoutDuration $ passwordCheckSyntax $ passwordMustChange $ passwordStorageScheme $ passwordMinAge $ passwordResetFailureCount $ passwordGraceLim [...]
+objectClasses: ( 2.16.840.1.113730.3.2.13 NAME 'passwordPolicy' DESC 'Netscape defined password policy objectclass' SUP top MAY ( passwordMaxAge $ passwordExp $ passwordMinLength $ passwordKeepHistory $ passwordInHistory $ passwordChange $ passwordWarning $ passwordLockout $ passwordMaxFailure $ passwordResetDuration $ passwordUnlock $ passwordLockoutDuration $ passwordCheckSyntax $ passwordMustChange $ passwordStorageScheme $ passwordMinAge $ passwordResetFailureCount $ passwordGraceLim [...]
objectClasses: ( 2.16.840.1.113730.3.2.30 NAME 'glue' DESC 'Netscape defined objectclass' SUP top X-ORIGIN 'Netscape Directory Server' )
objectClasses: ( 2.16.840.1.113730.3.2.32 NAME 'netscapeMachineData' DESC 'Netscape defined objectclass' SUP top X-ORIGIN 'Netscape Directory Server' )
objectClasses: ( 2.16.840.1.113730.3.2.38 NAME 'vlvSearch' DESC 'Netscape defined objectclass' SUP top MUST ( cn $ vlvBase $ vlvScope $ vlvFilter ) MAY ( multiLineDescription ) X-ORIGIN 'Netscape Directory Server' )
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
4 years, 11 months