Re: 2.4.18 refint getting "no such attribute" in bdb_modify_internal with removal; works with rename

[Howard Chu <hyc@symas.com>]

Andreas Hasenack wrote:
> Hi,
>
> I'm using the refint overlay with a few attributes, but I can't get it
> to work with krbPwdPolicyReference from MIT kerberos 1.7. I get the
> error from the subject when deleting the entry this attribute
> references.
>
> If, however, I *rename* the entry, the krbPwdPolicyReference attribute
> gets updated correctly. It seems to fail only when I remove the entry.
>
> This is the config:
> dn: olcOverlay={1}refint,olcDatabase={1}hdb,cn=config
> objectClass: olcRefintConfig
> objectClass: olcOverlayConfig
> objectClass: olcConfig
> objectClass: top
> olcOverlay: {1}refint
> olcRefintAttribute: krbObjectReferences
> olcRefintAttribute: member
> olcRefintAttribute: krbPwdPolicyReference
> olcRefintNothing: cn=localroot,cn=config
>
> This is the entry which has the attribute pointing to the entry I will
> remove (some attributes omitted for brevity):
> dn: krbPrincipalName=andreas@EXAMPLE.COM,cn=EXAMPLE.COM,ou=Kerberos Realms,dc=
>   example,dc=com
> krbPrincipalName: andreas@EXAMPLE.COM
> objectClass: krbPrincipal
> objectClass: krbPrincipalAux
> objectClass: krbTicketPolicyAux
> krbObjectReferences: uid=andreas,ou=people,dc=example,dc=com
> krbPwdPolicyReference: cn=default,cn=EXAMPLE.COM,ou=Kerberos Realms,dc=example
>   ,dc=com
>
> This is the entry I'm deleting. I would expect the
> krbPwdPolicyReference attribute from my entry above to be deleted. If
> I rename this cn=default, then krbPwdPolicyReference gets updated
> correctly.
> dn: cn=default,cn=EXAMPLE.COM,ou=Kerberos Realms,dc=example,dc=com
> cn: default
> objectClass: krbPwdPolicy
> krbMaxPwdLife: 36000
> krbMinPwdLife: 0
> krbPwdMinDiffChars: 1
> krbPwdMinLength: 1
> krbPwdHistoryLength: 1
>
> These are the relevant logs (level 16383):
> Oct  7 16:55:33 maestro slapd[6381]: refint_search_cb<NOTHING>
> Oct  7 16:55:33 maestro slapd[6381]: ==>  unique_modify
> <krbPrincipalName=andreas@EXAMPLE.COM,cn=EXAMPLE.COM,ou=Kerberos
> Realms,dc=example,dc=com>

> Any hints?
Nothing obvious comes to mind. Your log snippet indicates you're also using 
the unique overlay; it would probably help to show the entire config for the 
database and all overlays. Also your log snippet doesn't actually show the 
beginning of the Delete operation, so you haven't shown all of the relevant 
info there either.
--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/