[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: How can I *really* disable schema-checking?



--On Wednesday, January 21, 2009 01:35:25 PM +0000 Salim Fadhley <sal@stodge.org> wrote:


I've recently inherited responsibility for an LDAP server for a large
business critical operation.

Unfortunately the previous developer simply added data with
schema-checking off. They were using a very old version of OpenLDAP
(which I can no longer use) which allowed them to disable all
schema-checking. As a consequence the data is no longer compatible with
the schema - all validation fails.

I want to disable all schema-checking on my new server, so I used the
slapd.conf directive "schemacheck off" - however this seems to be ignored.
I know this because when I attempt to add an un-declared attribute to an
entry in the database, the change is rejected. I understand that the
"schemacheck" config directive has been deprecated in recent versions of
slapd: But is there any other way to achive the same thing?

I've been told that there is a class called "ExtensibleObject" - might
this help? Please bear in mind that my database is big (approx 20Mb) and
changing the data may break compatibility with the application.

All I really want is to re-create the same kind of "anything-goes"
platform that we had with the old 2.2.19 slapd which allowed me to
disable all schema-checking.

Thanks,

Sal

Years ago I wrote a flame to the list about the lost of this feature. No one actually thought that what I was concerned about was important and since then I have come around and joined that crowd. Better to just create a valid schema set that will work for you. It is not all that hard.

I am guessing that the real issue is that you have new attributes that do not appear anywhere in a loaded schema. It is possible that your unique attributes are not all that unique and are in an existing schema that is not being loaded. I would just search the files in the schema directory and see what I could find and load the schemas that will satisfy your requirements.

If the attributes are really new then the slowest part of creating the new schema entries is obtaining and OID arc. You need to go to <http://www.iana.org/cgi-bin/enterprise.pl> and fill out the form. An OID arc is free. And, yes, you can create one out of thin air, but if you do that there are others on this list that will slice up your liver for dinner.

This make seem like a lot of effort, but it is a one time job.

Bill


+--------------------------------------------------------
| Bill MacAllister <whm@stanford.edu>
| Systems Software Programmer, ITS Unix Systems, Stanford University