(ITS#4100) userCertificate vs. userCertificate;binary when deleting attribute

[michael@stroeder.com]

Full_Name: Michael Ströder
Version: 2.3.11
OS: Linux
URL: 
Submission from: (NULL) (83.124.23.160)


It seems that one can't remove a userCertificate attribute with a modify
request. See logs below. Logs are mixed OpenLDAP lib debug log and python-ldap
debug log.

-----------------------------------------------------------------------------------

Trying to delete "userCertificate"

*** ldapi://%2Ftmp%2Fopenldap-socket - LDAPObject.modify_ext
(('cn=xxxxxxx,dc=test,dc=de', [(1, 'userCertificate', None)], None, None),{})
ldap_modify_ext
ldap_send_initial_request
ldap_send_server_request
=> result: 9
*** ldapi://%2Ftmp%2Fopenldap-socket - LDAPObject.result3 ((9, 1, -1),{})
ldap_result ld 0x8bc5328 msgid 9
ldap_chkResponseList ld 0x8bc5328 msgid 9 all 1
ldap_chkResponseList returns ld 0x8bc5328 NULL
wait4msg ld 0x8bc5328 msgid 9 (infinite timeout)
wait4msg continue ld 0x8bc5328 msgid 9 all 1
** ld 0x8bc5328 Connections:
* host: /tmp/openldap-socket  port: 0  (default)
  refcnt: 2  status: Connected
  last used: Wed Oct 19 11:14:58 2005

** ld 0x8bc5328 Outstanding Requests:
 * msgid 9,  origid 9, status InProgress
   outstanding referrals 0, parent count 0
** ld 0x8bc5328 Response Queue:
   Empty
ldap_chkResponseList ld 0x8bc5328 msgid 9 all 1
ldap_chkResponseList returns ld 0x8bc5328 NULL
ldap_int_select
read1msg: ld 0x8bc5328 msgid 9 all 1
read1msg: ld 0x8bc5328 msgid 9 message type modify
read1msg: ld 0x8bc5328 0 new referrals
read1msg:  mark request completed, ld 0x8bc5328 msgid 9
request done: ld 0x8bc5328 msgid 9
res_errno: 0, res_error: <>, res_matched: <>
ldap_free_request (origid 9, msgid 9)
ldap_free_connection 0 1
ldap_free_connection: refcnt 1
ldap_parse_result
ldap_err2string
=> LDAPError - UNDEFINED_TYPE: {'info': 'userCertificate: requires ;binary
transfer', 'desc': 'Undefined
 attribute type'}

-----------------------------------------------------------------------------------

Trying to delete "userCertificate;binary"

*** ldapi://%2Ftmp%2Fopenldap-socket - LDAPObject.modify_ext
(('cn=xxxxxxx,dc=test,dc=de', [(1, 'userCertificate;binary', None)], None,
None),{})
ldap_modify_ext
ldap_send_initial_request
ldap_send_server_request
=> result: 10
*** ldapi://%2Ftmp%2Fopenldap-socket - LDAPObject.result3 ((10, 1, -1),{})
ldap_result ld 0x8bc5328 msgid 10
ldap_chkResponseList ld 0x8bc5328 msgid 10 all 1
ldap_chkResponseList returns ld 0x8bc5328 NULL
wait4msg ld 0x8bc5328 msgid 10 (infinite timeout)
wait4msg continue ld 0x8bc5328 msgid 10 all 1
** ld 0x8bc5328 Connections:
* host: /tmp/openldap-socket  port: 0  (default)
  refcnt: 2  status: Connected
  last used: Wed Oct 19 11:18:34 2005

** ld 0x8bc5328 Outstanding Requests:
 * msgid 10,  origid 10, status InProgress
   outstanding referrals 0, parent count 0
** ld 0x8bc5328 Response Queue:
   Empty
ldap_chkResponseList ld 0x8bc5328 msgid 10 all 1
ldap_chkResponseList returns ld 0x8bc5328 NULL
ldap_int_select
read1msg: ld 0x8bc5328 msgid 10 all 1
read1msg: ld 0x8bc5328 msgid 10 message type modify
read1msg: ld 0x8bc5328 0 new referrals
read1msg:  mark request completed, ld 0x8bc5328 msgid 10
request done: ld 0x8bc5328 msgid 10
res_errno: 0, res_error: <>, res_matched: <>
ldap_free_request (origid 10, msgid 10)
ldap_free_connection 0 1
ldap_free_connection: refcnt 1
ldap_parse_result
ldap_err2string
=> LDAPError - NO_SUCH_ATTRIBUTE: {'info': 'modify/delete:
userCertificate;binary: no such attribute', 'desc': 'No such attribute'}