[Date Prev][Date Next] [Chronological] [Thread] [Top]
RE: Rejected update for an attribute that wasn't being updated?

To: "'Quanah Gibson-Mount'" <quanah@stanford.edu>, "'Kurt D. Zeilenga'" <Kurt@OpenLDAP.org>
Subject: RE: Rejected update for an attribute that wasn't being updated?
From: "Howard Chu" <hyc@highlandsun.com>
Date: Fri, 16 Apr 2004 20:05:56 -0700
Cc: <openldap-software@OpenLDAP.org>
Importance: Normal
In-reply-to: <260647621.1082141142@cadabra-dsl.stanford.edu>
The entry in question *does* carry a suResidenceTSO attribute, and apparently
none of the objectclasses of the entry allow it. Most likely this entry was
created by slapadd without any schema checking. As I've noted in the past,
the server performs a full schema check during any modification, and so it
can complain about attributes that aren't touched by the modification, if
they exist in the entry but aren't allowed by the current schema.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Quanah
> Gibson-Mount
> Sent: Friday, April 16, 2004 6:46 PM
> To: Kurt D. Zeilenga
> Cc: openldap-software@OpenLDAP.org
> Subject: Re: Rejected update for an attribute that wasn't
> being updated?
>
>
>
>
> --On Friday, April 16, 2004 6:00 PM -0700 "Kurt D. Zeilenga"
> <Kurt@OpenLDAP.org> wrote:
>
> >> Any idea's?
> >
> > It would be helpful if you could provide sample LDIF of the
> > entry prior to attempting the modification as well an LDIF
> > representation of the modify request.
>
> Since the modification failed, the entry was never updated.
> It is (and I
> apologize for the x's, but not federal law and all... ;) ):
>
> # xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx, People, Stanford.edu
> dn:
> suRegID=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,cn=People,dc=Stanford,dc=edu
> cn: xxxxxxxxxxxxxxxxxxx
> displayName: xxxxxxxxxxxxxxxxx
> givenName: xxxxxxx
> o: Hospital
> o: University
> objectClass: inetOrgPerson
> objectClass: organizationalPerson
> objectClass: person
> objectClass: suCampusResident
> objectClass: suOperational
> objectClass: suPerson
> ou: Medicine
> sn: xxxxxxxxxxxxxx
> suCardNumber: xxxxxxxxxxxxxxxx
> suCreateAgent: person_slog
> suDisplayNameLF: xxxxxxxxxxxxxxxxxxxxxx
> suEntryStatus: active
> suGwAffiliation2: Hospital|Staff|HOUSE STAFF-NEUROSURGERY|RESIDENT
> suPrimaryOrganizationID: WEPI
> suRegID: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> suRegisteredName: xxxxxxxxxxxxxxxxxxxx
> suRegisteredNameLF: xxxxxxxxxxxxxxxxxxxx
> suResidencePhone: xxxxxxxxxxxxxxxxxxxxxxxx
> suResidenceRequiredAttribute: xxxxxxxxxxxxxxxxxxxx
> suResidenceRequiredAttribute: 10 063 2F*1A
> suResidenceTSO: 10 063 2F*1A
> suStanfordEndDate: 06/25/2001
> suSunetID: xxxxxxxxxxxxxxx
> suSunetID: xxxxxxxxx
> suUniqueIdentifier: xxxxxxxxxx
> suUnivID: xxxxxxxxxxxx
> suVisibAffiliation2: stanford
> suVisibEmail: stanford
> suVisibIdentity: stanford
> suVisibSunetID: stanford
> uid: xxxxxx
> structuralObjectClass: suPerson
> entryUUID: 09ca6206-1b8b-1027-9aa4-cd8abbd5c46f
> creatorsName: cn=manager,dc=stanford,dc=edu
> createTimestamp: 20030516013954Z
> title: Graduate, Medicine
> suCreateAPI: JNDI
> suVisibHomeAddress: private
> suVisibPermanentAddress: private
> homePostalAddress: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> suPermanentAddress: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> mail: xxxxxxxxxxxxxxxxxxx
> suPrivilegeGroup: stanford:administrative
> suPrivilegeGroup: univid:haspin
> suGwAffiliation1: University|Affiliate|Medicine|Graduate, Medicine
> suDisplayAffiliation: Affiliate
> suDisplayAffiliation: Staff
> suDisplayAffiliation: Recent student
> suGeneralID: xxxxxxxx
> suGeneralID: xxxxxxxx
> suGeneralID: xxxxxxxxxxxxx
> suGeneralID: xxxxxxxxxxxxx
> suGeneralID: xxxxxxxxxxxxxxxxxx
> suGeneralID: xxxxxxxxxxxxxx
> suGeneralID: xxxxxxxxx
> suVisibAffiliation1: stanford
> suAffiliation: stanford:affiliate:sponsored
> suAffiliation: stanford:affiliate
> suAffiliation: stanford:student:recent
> suAffiliation: hospital:staff
> entryCSN: 2004011110:54:44Z#0x0001#0#0000
> modifiersName:
> cn=slog-people,cn=service,cn=applications,dc=stanford,dc=edu
> modifyTimestamp: 20040111105444Z
> subschemaSubentry: cn=Subschema
> hasSubordinates: FALSE
>
>
> Here is the representation of the update according to JNDI:
>
> [slf5s.start]15 Apr 2004 12:00:48,471[slf5s.DATE]
> INFO[slf5s.PRIORITY]
> [slf5s.NDC]
> person_slog_test/registry_person-1[slf5s.THREAD]
> edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
> edu.stanford.slog.SlogProcessor.directorySync(SlogProcessor.ja
> va:267)[slf5s
> .LOCATION]
> theRDN:suregid=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx[slf5s.MESSAGE]
>
> [slf5s.start]15 Apr 2004 12:00:48,659[slf5s.DATE]
> INFO[slf5s.PRIORITY]
> [slf5s.NDC]
> person_slog_test/registry_person-1[slf5s.THREAD]
> edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
> edu.stanford.slog.SlogProcessor.directorySync(SlogProcessor.ja
> va:301)[slf5s
> .LOCATION]
> Discrepancies found -- [
>         delete\suprimaryorganizationid\,
>         add\suvisibaffiliation3\"none",
>         add\sugwaffiliation3\"University|Recent
> student|Medicine|Graduate,
> Medicine",
>         add\description\"UNKNOWN, RESIDENT",
>         add\susearchid\"xxxxxxx", "xxxxxxxxxxxx",
>
> add\sugwaffilphone1\"1:officeinternalpager:xxxxxxxxxxxxxx, ext.
> xxxxx",
>         replace\ou\"UNKNOWN", "Medicine",
>         replace\sugwaffiliation1\"Hospital|Staff|UNKNOWN|RESIDENT",
>         replace\objectclass\"suPerson", "organizationalPerson",
> "inetOrgPerson", "person", "suOperat
> ional",
>         replace\cn\"xxxxxxx xxxxxxxxx",
>         replace\sugeneralid\"xxxxxxx", "xxxxxxxxxxxxxxxxxxxxx",
> "xxxxxxxxxxxxxxx", "sponsorship/
> xxxxxxxxxxxxxxx", "hospital/xxxxxxxxxxxxxxxxxxxx", "xxxxxxxxxxxxxxx",
> "campcomm/xxxxxxxxxx", "xxxxxxxxxxxx", "xxxxxxxxxxxxx",
>         replace\title\"RESIDENT",
>         replace\sustanfordenddate\"2001-06-25",
>         replace\suregisteredname\"xxxxxxxxxxxxxx",
>         replace\suresidencephone\"xxxxxxxxxxxxxx",
>         replace\suresidencerequiredattribute\"10 063 2F*1A",
> "xxxxxxxxxxx",
>         replace\sugwaffiliation2\"University|Affiliate",
>         replace\displayname\"xxxxxxxxxxxxxxx",
>         replace\sudisplaynamelf\"xxxxxxxxxxxx",
>         replace\suregisterednamelf\"xxxxxxxxxxxxxxx",
>         replace\suaffiliation\"stanford:affiliate:sponsored",
> "stanford:student:recent", "sumc:staff
> "][slf5s.MESSAGE]
>
> [slf5s.start]15 Apr 2004 12:00:48,661[slf5s.DATE]
> INFO[slf5s.PRIORITY]
> [slf5s.NDC]
> person_slog_test/registry_person-1[slf5s.THREAD]
> edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
> edu.stanford.slog.SlogProcessor.directorySync(SlogProcessor.ja
> va:304)[slf5s
> .LOCATION]
> Action: UPDATE[slf5s.MESSAGE]
>
> [slf5s.start]15 Apr 2004 12:00:48,914[slf5s.DATE]
> ERROR[slf5s.PRIORITY]
> [slf5s.NDC]
> person_slog_test/registry_person-1[slf5s.THREAD]
> edu.stanford.xdirectory.DirectoryImpl[slf5s.CATEGORY]
> edu.stanford.xdirectory.DirectoryImpl$JndiModifyAction.perform
> JndiOperation
> (DirectoryImpl.java:309)[
> slf5s.LOCATION]
> javax.naming.directory.SchemaViolationException: [LDAP: error
> code 65 -
> attribute 'suResidenceTSO' n
> ot allowed]; remaining name
> 'suregid=xxxxxxxxxxxxxxxxxxxx,cn=People,dc=Stanford,dc=edu'[
> slf5s.MESSAGE]
>
> [slf5s.start]15 Apr 2004 12:00:48,919[slf5s.DATE]
> ERROR[slf5s.PRIORITY]
> [slf5s.NDC]
> person_slog_test/registry_person-1[slf5s.THREAD]
> edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
> edu.stanford.slog.SlogProcessor.directorySync(SlogProcessor.ja
> va:313)[slf5s
> .LOCATION]
> Exception while writing to directory entry:
> java.security.PrivilegedActionException: javax.naming.di
> rectory.SchemaViolationException: [LDAP: error code 65 - attribute
> 'suResidenceTSO' not allowed]; re
> maining name
> 'suregid=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,cn=People,dc=Stanfor
> d,dc=edu'[slf
> 5s.MESSAGE]
>
> [slf5s.start]15 Apr 2004 12:00:48,920[slf5s.DATE]
> ERROR[slf5s.PRIORITY]
> [slf5s.NDC]
> person_slog_test/registry_person-1[slf5s.THREAD]
> edu.stanford.slog.SlogProcessor[slf5s.CATEGORY]
> edu.stanford.slog.SlogProcessor.process(SlogProcessor.java:171
> )[slf5s.LOCAT
> ION]
> Excetpion from directory: java.security.PrivilegedActionException:
> javax.naming.directory.SchemaViol
> ationException: [LDAP: error code 65 - attribute 'suResidenceTSO' not
> allowed]; remaining name 'sure
> gid=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,cn=People,dc=Stanfor
> d,dc=edu'[slf
> 5s.MESSAGE]
>
>
> >
> > Also, can you duplicate the problem in 2.2.10 (without any
> > patches).
>
> I will try.  I realized in looking more closely, it is 2.2.6 without
> patches, the version of 2.2.6 with patches I had only had on
> my dev boxes
> (I called it 2.2.6.4, so it was a quick check).
>
> --Quanah
>
>
> --
> Quanah Gibson-Mount
> Principal Software Developer
> ITSS/TSS/Computing Systems
> ITSS/TSS/Infrastructure Operations
> Stanford University
> GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html
>
Follow-Ups:
- RE: Rejected update for an attribute that wasn't being updated?
  - From: Quanah Gibson-Mount <quanah@stanford.edu>
References:
- Re: Rejected update for an attribute that wasn't being updated?
  - From: Quanah Gibson-Mount <quanah@stanford.edu>
Prev by Date: (Fwd) Re: slapd: Unrecognized database type (dbd)
Next by Date: RE: Rejected update for an attribute that wasn't being updated?
Index(es):
- Chronological
- Thread