[389-users] Re: changing nsslapd-sizelimit in cn=config

Mark Reynolds wrote: > On 9/2/21 3:04 PM, Rob Crittenden wrote: >> In IPA I'm trying to set the value of nsslapd-sizelimit in cn=config >> online using our LDAP tool. It is failing with LDAP error 16. What I'm >> seeing is: >> >> ipapython.ipaldap: DEBUG: update_entry modlist [(1, 'nsslapd-sizelimit', >> [b'2000']), (0, 'nsslapd-sizelimit', [b'100000'])] >> ldap.NO_SUCH_ATTRIBUTE: {'msgtype': 103, 'msgid': 16, 'result': 16, >> 'desc': 'No such attribute', 'ctrls': [] >> >> Basically I'm trying to delete the original value and adding a new one. > So you are doing two mods?  MOD_DELETE and MOD_ADD?   Yeah that won't > work, needs to be MOD_REPLACE > > cn=config does behave differently with attributes in the top cn=config > entry.  It's been this way for years, so I'm surprised to see an issue > being raised about it now.  But, basically we stopped filling in the > cn=config entry in dse.ldif with all these config attributes and instead > made them all "invisible defaults". So if the attribute is not changed > after install then trying to delete that attribute will fail. I see it now. If IPA can't determine that an attribute is single-value then it does a DELETE/ADD instead of a REPLACE. nsslapd-sizelimit isn't in schema yet so it is assumed to be multi-valued. I can add an exception in IPA.

thanks rob > Mark > >> It seems like cn=config is being treated differently. >> >> rob >> _______________________________________________ >> 389-users mailing list -- 389-users(a)lists.fedoraproject.org >> To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org >> Fedora Code of Conduct: >> https://docs.fedoraproject.org/en-US/project/code-of-conduct/ >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> List Archives: >> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje... >> >> Do not reply to spam on the list, report it: >> https://pagure.io/fedora-infrastructure