https://bugzilla.redhat.com/show_bug.cgi?id=664563https://bugzilla.redhat.com/attachment.cgi?id=470351&action=diffhttps://bugzilla.redhat.com/attachment.cgi?id=470351&action=edit
Description: To get the effective rights of non-present entry,
GER code takes @<objectclass> as a part of an attribute list
in the search. The code was generating the temporary, non-
present entry with the leaf RDN "cn=<value>". Instead of "cn",
an attribute type belonging to the objectclass whould be used.
This patch changes to allow either @<objectclass> or
@<objectclass>:<dntype>. If @<objectclass> is given, the first
MUST attribute type (or the first MAY attribute type if MUST
does not exist) is used for the attribyte type in the leaf RDN.
If @<objectclass>:<dntype> is given,<dntype> is used.
Plus, acl_check_for_target_macro in aclparse.c now checks an
invalid macro syntax [($dn)] and returns a syntax error.
https://bugzilla.redhat.com/show_bug.cgi?id=663484https://bugzilla.redhat.com/attachment.cgi?id=469889&action=diffhttps://bugzilla.redhat.com/attachment.cgi?id=469889&action=edit
Description:
1) Introducing a config parameter nsslapd-entryusn-import-initval.
If the value is digit, e.g., 0, 10, 100 ..., the imported entries
will have the entryusn value.
If the value is not digit, e.g., "next", the imported entries
will have the last entryusn + 1 from the database existed before
the import was exected or initialized by the master.
2) Internal OID LDBM_ENTRYUSN_OID has been redifined in back-ldbm.h
to avoid a possible conflict.
3) If an attribute to modify is an operational attribute and
that is the only one modify operation (not one of the series
of modify operations), the server returns UNWILLING_TO_PERFORM.
In addition, this patch fixes a minor invalid access to a freed
memory in cl5DeleteDBSync.