Directory ApacheDS
  1. Directory ApacheDS
  2. DIRSERVER-1524

ACI rules stop working for no reason, must be tweaked to "reawaken"

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Critical Critical
    • Resolution: Fixed
    • Affects Version/s: 1.5.7
    • Fix Version/s: 2.0.0-M1
    • Component/s: None
    • Labels:
      None
    • Environment:
      Ubuntu Lucid, pretty much stock

      Description

      I have two ACIs set up: one which allows users access to change their passwords; one which allows anonymous search so the system can be used as an authenticator without needing a hard-wired account to bind to.

      Every now and then, the anonymous search capability (both as an authenticator and when tried with ldapsearch -x) simply stops working. Killing and restarting the server does not restore it. Editing the ACI in any way, however – changing its precedence for example – immediately fixes it.

        Activity

        Hide
        Pierre-Arnaud Marcelot added a comment -

        Version 2.0.0-M1 has been release.
        Closing all related resolved issues.

        Show
        Pierre-Arnaud Marcelot added a comment - Version 2.0.0-M1 has been release. Closing all related resolved issues.
        Hide
        Emmanuel Lecharny added a comment -

        I think it's fixed with http://svn.apache.org/viewvc?rev=1059961&view=rev
        The Tuple and Group caches are now reloaded at startup

        Show
        Emmanuel Lecharny added a comment - I think it's fixed with http://svn.apache.org/viewvc?rev=1059961&view=rev The Tuple and Group caches are now reloaded at startup
        Hide
        Emmanuel Lecharny added a comment -

        the TupleCache and GroupCache were created but never read again when initializing the server.

        Show
        Emmanuel Lecharny added a comment - the TupleCache and GroupCache were created but never read again when initializing the server.
        Hide
        Emmanuel Lecharny added a comment -

        Will be fixed in 2.0-RC1. It's just a matter of updating the cache when restarting the server.

        Show
        Emmanuel Lecharny added a comment - Will be fixed in 2.0-RC1. It's just a matter of updating the cache when restarting the server.
        Hide
        Emmanuel Lecharny added a comment -

        No need to provide any ACI.

        This is clearly a bug : the ACI cache which is updated when new ACI are added is cleared when the server is shutdown, and is not currently restored when it starts again.

        We are working on it, and will probably have a fix for that in the next days.

        /me is a but stunned that this problem never popped before :/

        Show
        Emmanuel Lecharny added a comment - No need to provide any ACI. This is clearly a bug : the ACI cache which is updated when new ACI are added is cleared when the server is shutdown, and is not currently restored when it starts again. We are working on it, and will probably have a fix for that in the next days. /me is a but stunned that this problem never popped before :/
        Hide
        Emmanuel Lecharny added a comment -

        Ouch !

        Seems a serious bug.

        Can you provide both ACI so that I cn have a look at what's going on ? I'm currently reviewing the whole ACI subsystem atm...

        Show
        Emmanuel Lecharny added a comment - Ouch ! Seems a serious bug. Can you provide both ACI so that I cn have a look at what's going on ? I'm currently reviewing the whole ACI subsystem atm...

          People

          • Assignee:
            Unassigned
            Reporter:
            Michael Scott Shappe
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development