[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Rejected update for an attribute that wasn't being updated?





--On Friday, April 16, 2004 6:00 PM -0700 "Kurt D. Zeilenga" <Kurt@OpenLDAP.org> wrote:

Any idea's?

It would be helpful if you could provide sample LDIF of the entry prior to attempting the modification as well an LDIF representation of the modify request.

Since the modification failed, the entry was never updated. It is (and I apologize for the x's, but not federal law and all... ;) ):


# xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx, People, Stanford.edu
dn: suRegID=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,cn=People,dc=Stanford,dc=edu
cn: xxxxxxxxxxxxxxxxxxx
displayName: xxxxxxxxxxxxxxxxx
givenName: xxxxxxx
o: Hospital
o: University
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: suCampusResident
objectClass: suOperational
objectClass: suPerson
ou: Medicine
sn: xxxxxxxxxxxxxx
suCardNumber: xxxxxxxxxxxxxxxx
suCreateAgent: person_slog
suDisplayNameLF: xxxxxxxxxxxxxxxxxxxxxx
suEntryStatus: active
suGwAffiliation2: Hospital|Staff|HOUSE STAFF-NEUROSURGERY|RESIDENT
suPrimaryOrganizationID: WEPI
suRegID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
suRegisteredName: xxxxxxxxxxxxxxxxxxxx
suRegisteredNameLF: xxxxxxxxxxxxxxxxxxxx
suResidencePhone: xxxxxxxxxxxxxxxxxxxxxxxx
suResidenceRequiredAttribute: xxxxxxxxxxxxxxxxxxxx
suResidenceRequiredAttribute: 10 063 2F*1A
suResidenceTSO: 10 063 2F*1A
suStanfordEndDate: 06/25/2001
suSunetID: xxxxxxxxxxxxxxx
suSunetID: xxxxxxxxx
suUniqueIdentifier: xxxxxxxxxx
suUnivID: xxxxxxxxxxxx
suVisibAffiliation2: stanford
suVisibEmail: stanford
suVisibIdentity: stanford
suVisibSunetID: stanford
uid: xxxxxx
structuralObjectClass: suPerson
entryUUID: 09ca6206-1b8b-1027-9aa4-cd8abbd5c46f
creatorsName: cn=manager,dc=stanford,dc=edu
createTimestamp: 20030516013954Z
title: Graduate, Medicine
suCreateAPI: JNDI
suVisibHomeAddress: private
suVisibPermanentAddress: private
homePostalAddress: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
suPermanentAddress: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
mail: xxxxxxxxxxxxxxxxxxx
suPrivilegeGroup: stanford:administrative
suPrivilegeGroup: univid:haspin
suGwAffiliation1: University|Affiliate|Medicine|Graduate, Medicine
suDisplayAffiliation: Affiliate
suDisplayAffiliation: Staff
suDisplayAffiliation: Recent student
suGeneralID: xxxxxxxx
suGeneralID: xxxxxxxx
suGeneralID: xxxxxxxxxxxxx
suGeneralID: xxxxxxxxxxxxx
suGeneralID: xxxxxxxxxxxxxxxxxx
suGeneralID: xxxxxxxxxxxxxx
suGeneralID: xxxxxxxxx
suVisibAffiliation1: stanford
suAffiliation: stanford:affiliate:sponsored
suAffiliation: stanford:affiliate
suAffiliation: stanford:student:recent
suAffiliation: hospital:staff
entryCSN: 2004011110:54:44Z#0x0001#0#0000
modifiersName: cn=slog-people,cn=service,cn=applications,dc=stanford,dc=edu
modifyTimestamp: 20040111105444Z
subschemaSubentry: cn=Subschema
hasSubordinates: FALSE


Here is the representation of the update according to JNDI:

[slf5s.start]15 Apr 2004 12:00:48,471[slf5s.DATE]
INFO[slf5s.PRIORITY]
[slf5s.NDC]
person_slog_test/registry_person-1[slf5s.THREAD]
edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
edu.stanford.slog.SlogProcessor.directorySync(SlogProcessor.java:267)[slf5s
.LOCATION]
theRDN:suregid=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx[slf5s.MESSAGE]

[slf5s.start]15 Apr 2004 12:00:48,659[slf5s.DATE]
INFO[slf5s.PRIORITY]
[slf5s.NDC]
person_slog_test/registry_person-1[slf5s.THREAD]
edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
edu.stanford.slog.SlogProcessor.directorySync(SlogProcessor.java:301)[slf5s
.LOCATION]
Discrepancies found -- [
delete\suprimaryorganizationid\,
add\suvisibaffiliation3\"none",
add\sugwaffiliation3\"University|Recent student|Medicine|Graduate, Medicine",
add\description\"UNKNOWN, RESIDENT",
add\susearchid\"xxxxxxx", "xxxxxxxxxxxx",
add\sugwaffilphone1\"1:officeinternalpager:xxxxxxxxxxxxxx, ext. xxxxx",
replace\ou\"UNKNOWN", "Medicine",
replace\sugwaffiliation1\"Hospital|Staff|UNKNOWN|RESIDENT",
replace\objectclass\"suPerson", "organizationalPerson", "inetOrgPerson", "person", "suOperat
ional",
replace\cn\"xxxxxxx xxxxxxxxx",
replace\sugeneralid\"xxxxxxx", "xxxxxxxxxxxxxxxxxxxxx", "xxxxxxxxxxxxxxx", "sponsorship/
xxxxxxxxxxxxxxx", "hospital/xxxxxxxxxxxxxxxxxxxx", "xxxxxxxxxxxxxxx", "campcomm/xxxxxxxxxx", "xxxxxxxxxxxx", "xxxxxxxxxxxxx",
replace\title\"RESIDENT",
replace\sustanfordenddate\"2001-06-25",
replace\suregisteredname\"xxxxxxxxxxxxxx",
replace\suresidencephone\"xxxxxxxxxxxxxx",
replace\suresidencerequiredattribute\"10 063 2F*1A", "xxxxxxxxxxx",
replace\sugwaffiliation2\"University|Affiliate",
replace\displayname\"xxxxxxxxxxxxxxx",
replace\sudisplaynamelf\"xxxxxxxxxxxx",
replace\suregisterednamelf\"xxxxxxxxxxxxxxx",
replace\suaffiliation\"stanford:affiliate:sponsored", "stanford:student:recent", "sumc:staff
"][slf5s.MESSAGE]


[slf5s.start]15 Apr 2004 12:00:48,661[slf5s.DATE]
INFO[slf5s.PRIORITY]
[slf5s.NDC]
person_slog_test/registry_person-1[slf5s.THREAD]
edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
edu.stanford.slog.SlogProcessor.directorySync(SlogProcessor.java:304)[slf5s
.LOCATION]
Action: UPDATE[slf5s.MESSAGE]

[slf5s.start]15 Apr 2004 12:00:48,914[slf5s.DATE]
ERROR[slf5s.PRIORITY]
[slf5s.NDC]
person_slog_test/registry_person-1[slf5s.THREAD]
edu.stanford.xdirectory.DirectoryImpl[slf5s.CATEGORY]
edu.stanford.xdirectory.DirectoryImpl$JndiModifyAction.performJndiOperation
(DirectoryImpl.java:309)[
slf5s.LOCATION]
javax.naming.directory.SchemaViolationException: [LDAP: error code 65 - attribute 'suResidenceTSO' n
ot allowed]; remaining name 'suregid=xxxxxxxxxxxxxxxxxxxx,cn=People,dc=Stanford,dc=edu'[
slf5s.MESSAGE]


[slf5s.start]15 Apr 2004 12:00:48,919[slf5s.DATE]
ERROR[slf5s.PRIORITY]
[slf5s.NDC]
person_slog_test/registry_person-1[slf5s.THREAD]
edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
edu.stanford.slog.SlogProcessor.directorySync(SlogProcessor.java:313)[slf5s
.LOCATION]
Exception while writing to directory entry: java.security.PrivilegedActionException: javax.naming.di
rectory.SchemaViolationException: [LDAP: error code 65 - attribute 'suResidenceTSO' not allowed]; re
maining name 'suregid=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,cn=People,dc=Stanford,dc=edu'[slf
5s.MESSAGE]


[slf5s.start]15 Apr 2004 12:00:48,920[slf5s.DATE]
ERROR[slf5s.PRIORITY]
[slf5s.NDC]
person_slog_test/registry_person-1[slf5s.THREAD]
edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
edu.stanford.slog.SlogProcessor.process(SlogProcessor.java:171)[slf5s.LOCAT
ION]
Excetpion from directory: java.security.PrivilegedActionException: javax.naming.directory.SchemaViol
ationException: [LDAP: error code 65 - attribute 'suResidenceTSO' not allowed]; remaining name 'sure
gid=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,cn=People,dc=Stanford,dc=edu'[slf
5s.MESSAGE]




Also, can you duplicate the problem in 2.2.10 (without any patches).

I will try. I realized in looking more closely, it is 2.2.6 without patches, the version of 2.2.6 with patches I had only had on my dev boxes (I called it 2.2.6.4, so it was a quick check).


--Quanah


-- Quanah Gibson-Mount Principal Software Developer ITSS/TSS/Computing Systems ITSS/TSS/Infrastructure Operations Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html