[Date Prev][Date Next] [Chronological] [Thread] [Top]

Antw: [EXT] Re: Q: "5e43b796 PROXIED attributeDescription "DC" inserted."



>>> Quanah Gibson-Mount <quanah@symas.com> schrieb am 12.02.2020 um 23:53 in
Nachricht
<28602_1581548017_5E4481F1_28602_870_1_DDCC864DABD8E91E4DE841F1@[192.168.1.144]>


> 
> ‑‑On Wednesday, February 12, 2020 9:33 AM +0100 Ulrich Windl 
> <Ulrich.Windl@rz.uni‑regensburg.de> wrote:
> 
>> Hi!
>>
>> While trying to slapadd a dumped config database in "‑u" mode, I see this:
>> 5e43b796 PROXIED attributeDescription "DC" inserted.
>>
>> What does it mean? There is no "DC" in the LDIF file being imported.
> 
> It has to do with attributes existing in cn=config (such as modifiersName 
> or creatorsName usually) where the DN that modified the entry has a "dc" 
> component.  You can safely ignore it.  This is one of the reasons I'm not 
> fond of the default way in which Debian/Ubuntu/RH (mis)configured their 
> default access setup for cn=config.

Thanks a lot!

First I only had been searching it in upper case, but it's there in lower case
at various places:
olcAccess, olcLimits, olcSuffix, olcRootDN, olcPPolicyDefault.
Also as database #0 was the first one to import, those dc= names were missing
at that point in time.
That would explain the message. However the message by itself is of little
usefulness: The only context is 5e43b796, and it's hard to relate that to some
object or line in LDIF...

Regards,
Ulrich

> 
> Regards,
> Quanah
> 
> 
> 
> ‑‑
> 
> Quanah Gibson‑Mount
> Product Architect
> Symas Corporation
> Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
> <http://www.symas.com>