Re: Problems with slapcat/slapadd in upgrade from 2.2.23 to 2.3.11

[Charles Stephens <cfs@cowlabs.com>]

Is there a reference on ACI syntax?  What is wrong with this specific  
entry?

Thanks for your assistance.

cfs

On  19 Oct 2005, at 23:27, Pierangelo Masarati wrote:

> In 2.3.6 ACI syntax has been added.  Your ACI values appear to  
> violate the
> ACI syntax and thus are rejected at write time (rather than at access
> checking time as it likely used to happen with earlier versions).
>
> p.
>
>
>
> > I am trying to prime a replica server that was upgraded from 2.2.23
> > to 2.3.11.  The replica server's backend database files were removed,
> > a slapcat was performed on the master (which is still running 2.2.23)
> > and copied to the replica server.  However, when attempting to run
> > slapadd on the upgraded replica, the following error is emited about
> > 1/3rd the way through processing of the ldif file (some object data
> > has been altered for security reasons):
> >
> >
> > => str2entry: "dn: cn=sysops-server,ou=policy,dc=cowlabs,dc=com
> > rootAccess: cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com
> > cn: sysops-server
> > objectClass: top
> > objectClass: accessPolicy
> > creatorsName: uid=danw,ou=People,dc=cowlabs,dc=com
> > createTimestamp: 20030925100234Z
> > manager: cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com
> > OpenLDAPaci: 1#entry#grant;w;[all]
> > #group#cn=sysops,ou=application,ou=groups,dc
> > =cowlabs,dc=com/dnGroup
> > description: Sysops operated server
> > structuralObjectClass: accessPolicy
> > entryUUID: 7ab0c466-0c43-1028-87e3-9df07bd66cc4
> > loginAccess: cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com
> > loginAccess: cn=sysops-
> > managers,ou=application,ou=groups,dc=cowlabs,dc=com
> > loginAccess: uid=user1,ou=People,dc=cowlabs,dc=com
> > entryCSN: 20051019183615Z#000001#00#000000
> > modifiersName: uid=user2,ou=people,dc=cowlabs,dc=com
> > modifyTimestamp: 20051019183615Z
> > "
> >
> > > > > dnPrettyNormal: <cn=sysops-server,ou=policy,dc=cowlabs,dc=com>
> > <<< dnPrettyNormal: <cn=sysops-server,ou=policy,dc=cowlabs,dc=com>,
> > <cn=sysops-server,ou=policy,dc=cowlabs,dc=com>
> >
> > > > > dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> > <<< dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> >
> > > > > dnNormalize:  
> > > > > <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> > <<< dnNormalize:  
> > <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> >
> > > > > dnPretty: <uid=danw,ou=People,dc=cowlabs,dc=com>
> > <<< dnPretty: <uid=danw,ou=People,dc=cowlabs,dc=com>
> >
> > > > > dnNormalize: <uid=danw,ou=People,dc=cowlabs,dc=com>
> > <<< dnNormalize: <uid=danw,ou=people,dc=cowlabs,dc=com>
> >
> > > > > dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> > <<< dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> >
> > > > > dnNormalize:  
> > > > > <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> > <<< dnNormalize:  
> > <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com>
> >
> > > > > dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com/
> > dnGroup>
> > <<< dnPretty: <cn=sysops,ou=application,ou=groups,dc=cowlabs,dc=com/
> > dnGroup>
> > <= str2entry NULL (smr_normalize 21)
> > slapadd: could not parse entry (line=576930)
> >
> >
> > This entry is the first with an ACI attribute set, so likely it is
> > related to ACI attribute parsing.
> >
> > Also, the slapcat does work with the 2.3.5 version of slapadd.  What
> > has changed to cause this to fail.  Is it a new bug or I am doing
> > something wrong at export/import time?
> >
> > cfs
>
>
> --
> Pierangelo Masarati
> mailto:pierangelo.masarati@sys-net.it
>
>
>     SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax:  
> +390382476497