[DIRSERVER-837] LDAP clients are able to modify the subschemaSubentry attribute

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 1.5.0
• Environment: * ApacheDS 1.5.0 (SNAPSHOT); * Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_07-b03); * Windows XP Professional SP2
• Assignee: Unassigned
• Reporter: Stefan Zoerner
• Created: 30/Jan/07 21:42
• Updated: 31/Jan/07 19:43
• Resolved: 31/Jan/07 12:47

Description

RFC 2251 states
-->8--
Entries MAY contain, among others, the following operational attributes, defined in [...]. These attributes are maintained automatically by the server and are not modifiable by clients:

• creatorsName: ...
• createTimestamp: ...
• modifiersName: ...
• modifyTimestamp: ...
• subschemaSubentry: ...

--8<--

In the current 1.5.0, clients can add a subschemaSubentry attribute value via a modify operation. I'll attach a JUnit testcase which demonstrates the problem.