Re: Problems with slapcat/slapadd in upgrade from 2.2.23 to 2.3.11

["Pierangelo Masarati" <ando@sys-net.it>]

In 2.3.6 ACI syntax has been added.  Your ACI values appear to violate the
ACI syntax and thus are rejected at write time (rather than at access
checking time as it likely used to happen with earlier versions).

p.


> I am trying to prime a replica server that was upgraded from 2.2.23
> to 2.3.11.  The replica server's backend database files were removed,
> a slapcat was performed on the master (which is still running 2.2.23)
> and copied to the replica server.  However, when attempting to run
> slapadd on the upgraded replica, the following error is emited about
> 1/3rd the way through processing of the ldif file (some object data
> has been altered for security reasons):
>
>
> => str2entry: "dn: cn=sysops-server,ou=policy,dc=cowlabs,dc=com
> rootAccess: cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com
> cn: sysops-server
> objectClass: top
> objectClass: accessPolicy
> creatorsName: uid=danw,ou=People,dc=cowlabs,dc=com
> createTimestamp: 20030925100234Z
> manager: cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com
> OpenLDAPaci: 1#entry#grant;w;[all]
> #group#cn=sysops,ou=application,ou=groups,dc
> =cowlabs,dc=com/dnGroup
> description: Sysops operated server
> structuralObjectClass: accessPolicy
> entryUUID: 7ab0c466-0c43-1028-87e3-9df07bd66cc4
> loginAccess: cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com
> loginAccess: cn=sysops-
> managers,ou=application,ou=groups,dc=cowlabs,dc=com
> loginAccess: uid=user1,ou=People,dc=cowlabs,dc=com
> entryCSN: 20051019183615Z#000001#00#000000
> modifiersName: uid=user2,ou=people,dc=cowlabs,dc=com
> modifyTimestamp: 20051019183615Z
> "
>  >>> dnPrettyNormal: <cn=sysops-server,ou=policy,dc=cowlabs,dc=com>
> <<< dnPrettyNormal: <cn=sysops-server,ou=policy,dc=cowlabs,dc=com>,
> <cn=sysops-server,ou=policy,dc=cowlabs,dc=com>
>  >>> dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> <<< dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
>  >>> dnNormalize: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> <<< dnNormalize: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
>  >>> dnPretty: <uid=danw,ou=People,dc=cowlabs,dc=com>
> <<< dnPretty: <uid=danw,ou=People,dc=cowlabs,dc=com>
>  >>> dnNormalize: <uid=danw,ou=People,dc=cowlabs,dc=com>
> <<< dnNormalize: <uid=danw,ou=people,dc=cowlabs,dc=com>
>  >>> dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> <<< dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
>  >>> dnNormalize: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> <<< dnNormalize: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
>  >>> dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com/
> dnGroup>
> <<< dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com/
> dnGroup>
> <= str2entry NULL (smr_normalize 21)
> slapadd: could not parse entry (line=576930)
>
>
> This entry is the first with an ACI attribute set, so likely it is
> related to ACI attribute parsing.
>
> Also, the slapcat does work with the 2.3.5 version of slapadd.  What
> has changed to cause this to fail.  Is it a new bug or I am doing
> something wrong at export/import time?
>
> cfs
>


-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497