[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Comparing slapcat output

> My OpenLDAP 2.2.23 is rather quiescent at about 02:00 AM so
> I do a `slapcat' on each slave to check whether the output
> is identical to that of the master in order to check consistency.
>  I notice that entries which have been modified by Heimdal Kerberos
> over slapi differ for the modifiersName and creatorsName attribute
> types:
>
uidnumber=0+gidnumber=0,cn=peercred,cn=external,cn=auth

^^ this seems to be naively computed without using slapd's DN
normalization routines; see below.

gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth

^^^ this has been normalized by slapd's DN normalization routines, which
implies using the attributeType's names as defined in the schema (note
some uppercase chars in the attribute types, and the AVAs have been sorted
based on lexicographical order of attribute types first, then of values,
so gidNumber comes before uidNumber9

p.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497