Re: (ITS#7673) rwm and bad ACL evaluation

[hyc@symas.com]

michael@stroeder.com wrote:
> This is a cryptographically signed message in MIME format.

Is it really necessary to sign your emails to the ITS? The PKCS7 signature is 
longer than the message text.

> --------------ms020400000305090906010704
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: quoted-printable
>
> Mosemann, Russell wrote:
>>> Did you already try with this?
>>>
>>> rwm-drop-unrequested-attrs no
>> =20
>> If you look through the messages
>> (http://www.openldap.org/its/index.cgi?findid=3D7673), you will see tha=
> t the
>> same suggestion was made by Pierangelo Masarati 6 months ago in followu=
> p 5.
>> My response in followup 6 was that it doesn't work. A quick test indica=
> tes
>> that it still does not work in 2.4.39.
>
> I had a similar issue myself before:
>
> http://www.openldap.org/its/index.cgi?findid=3D7495
>
> Using extra_attrs as suggested by Hallvard gave seg fault as result.
> Did not investigate it further though.
>
> Using slapo-rwm is a pain. One will hit many seg faults.

There are quite a few open bug reports against slapo-rwm. Patches welcome.
>
> Ciao, Michael.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/