[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
trouble with regex type constraint overlay
i'm experimenting with the constrain overlay, and have what i think is
a fairly simply constraint that's giving me trouble. below are the
details. i believe i've followed slapo-constraint(5) (and regex(7))
accurately, but i must be missing something.
>cat montage_admin.ldif
dn:
uid
=
admin,ou=montage_test,ou=other,ou=users,ou=accounts,dc=ltn,dc=lvc,dc=com
changetype: modify
replace: uidNumber
uidNumber: 5000
>ldapmodify -vxWD 'cn=admin,dc=ltn,dc=lvc,dc=com' -f montage_admin.ldif
ldap_initialize( <DEFAULT> )
Enter LDAP Password:
replace uidNumber:
5000
modifying entry
"uid
=
admin
,ou=montage_test,ou=other,ou=users,ou=accounts,dc=ltn,dc=lvc,dc=com"
ldap_modify: Constraint violation (19)
additional info: modify breaks constraint on uidNumber
>ldapsearch -vvxWLLLD 'cn=admin,dc=ltn,dc=lvc,dc=com' "(uid=admin)"
ldap_initialize( <DEFAULT> )
Enter LDAP Password:
filter: (uid=admin)
requesting: All userApplication attributes
dn:
uid
=admin,ou=montage_test,ou=other,ou=users,ou=accounts,dc=ltn,dc=lvc,dc=c
om
userPassword:: e1NTSEF9TkF5TGVabXFWTU9zT01EZVNWdHA1Mm9uUWtOalg3cXY=
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: top
homeDirectory: /dev/null
cn: admin
uid: admin
sn: admin
givenName: admin
gidNumber: 5001
uidNumber: 2016
>ldapsearch -vvxWLLLb 'cn=config' -D 'cn=admin,cn=config'
"(objectClass=olcConstraintConfig)"
ldap_initialize( <DEFAULT> )
Enter LDAP Password:
filter: (objectClass=olcConstraintConfig)
requesting: All userApplication attributes
dn: olcOverlay={3}constraint,olcDatabase={2}bdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcConstraintConfig
olcOverlay: {3}constraint
olcConstraintAttribute: uidNumber regex ^[:digit:]*$
thanks
-ben