[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: slapcat, PROXIED attributeDescription inserted, and cron jobs



btb@bitrate.net wrote:
hi-

i'm running slapcat from a daily cron job to back up cn=config and other
databases.  i've recently updated from 2.4.21 to 2.4.23, and notice now
in the output of slapcat, messages such as

  >slapcat -b 'cn=config' -l 'config.ldif'>  /dev/null
PROXIED attributeDescription "OU" inserted.
PROXIED attributeDescription "DC" inserted.

a bit of searching seems to indicate that these shouldn't be cause for
concern, and are just informative messages.

Correct.

Usually, these messages occur because one of your cn=config entries has a modifiersName or some other attribute containing a DN using these attributes, and the config backend hasn't read the cn=schema,cn=config tree yet.

This situation never happened in 2.3 because only "cn=config" had write access to the cn=config tree. But since 2.4 allows you to set the ACLs so that arbitrary users can write to the tree, you can run into these cases.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/