[PATCH] Schema violation on OpenLDAP 2.1.12

• Key: JS1-267
• Type: Bug
• Status: Resolved
• Resolution: Fixed
• Assignee: Unassigned
• Reporter: Sami Leino
• Component/s: Security
• Affects Version/s: 1.4b4-dev / CVS

Environment

Operating System: All
Platform: All

Description

I created this bug entry because the attachment in Daniel Twadell's
posting 'LDAP Schema violation using OpenLDAP 2.1.12' did not get through the
mailing list for some reason. Here's what Daniel wrote:

> implementing the LDAP schema using openLDAP 2.1.12
> and after adding the jetspeed.schema, openldap complains about the about
> the matching syntax of the usergrouprole attribute
>
> /usr/local/etc/openldap/schema/jetspeed.schema: line 37: AttributeType
> inappropriate matching rule: "caseIgnoreIA5Match"
>
> I changed the SYNTAX on line 36 in the jetspeed.schema to
> SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
> and openldap is fine....

I changed the syntax to the value Daniel suggested, and wrote slightly better
descriptions for the attributes. I configured my OpenLDAP build to use the new
schema, and imported test data to validate that nothing got broken. The
modified schema should therefore be valid, although my OpenLDAP build does not
unfortunately warn me about minor schema violations.

Comments

[Sami Leino]

Created an attachment (id=5641)
This attachment contains the correct syntax for the 'usergrouprole' attribute

[Sami Leino]

Created an attachment (id=5653)
File 'jetspeed.ldif' having the extraneous linefeed removed

[Sami Leino]

Argh... it seems that my text editor is having some kind of a CRLF bug, since
the linefeed is still there. Discard the last attachment, a replacement is
coming right up...

[Sami Leino]

Created an attachment (id=5654)
Both files (schema and LDIF) having LF linefeeds packaged as a ZIP archive. Sorry about the confusion.

[Mark Orciuch]

Documenting as known issue and deferring to 1.5

[David Sean Taylor]

patch applied, please test