https://bugzilla.redhat.com/show_bug.cgi?id=574167https://bugzilla.redhat.com/attachment.cgi?id=409555&action=diffhttps://bugzilla.redhat.com/attachment.cgi?id=409555&action=edit
Files:
ldap/ldif/template-suffix-db.ldif.in
ldap/servers/slapd/dn.c
Bug Description: If a DN contains "\ " at the end of its RDN,
it's be converted to "\20" by slapi_dn_normalize_ext in the
add operation. But the following search returns ' ' (not
an escaped space).
Fix Description: When slapi_dn_normalize_ext was applied to a
string which contains "\20", it converted the string to ' '.
This fix changes the behaviour so that the string "\20" in
DN remains untouched.
Also, this patch includes a fix to add a default suffix value
with no double quotes in template-suffix-db.ldif.in. We keep
double quoted suffix for the backward compatibility.
585905 - ACL with targattrfilters error crashes the server
https://bugzilla.redhat.com/attachment.cgi?id=409325&action=diffhttps://bugzilla.redhat.com/attachment.cgi?id=409325&action=edit
Bug Description:
targattrfilters takes this format of value:
(targattrfilters="add=attr1:F1 && attr2:F2... &&
attrn:Fn,del=attr1:F1 && attr2:F2 ... && attrn:Fn")
The ACL plugin code had blindly expected the value contains
the operator "add" or "del" and '=' to concatenate the
attribute and filter pair. The plugin should have checked
the possibility that the value does not follow the format.
Fix Description:
If '=' is not included in the targattrfilters value, the
ACL parser returns ACL_SYNTAX_ERR.
Thanks,
--noriko
https://bugzilla.redhat.com/attachment.cgi?id=408196&action=diffhttps://bugzilla.redhat.com/attachment.cgi?id=408196&action=edit
Background info:
http://directory.fedoraproject.org/wiki/Upgrade_to_New_DN_Format
Fix Description:
. adding slapi_dn_normalize_ext and its siblings to normalize/validate
invalid DNs; deprecating slapi_dn_normalize and its siblings. (dn.c)
. replacing slapi_dn_normalize with new corresponding functions.
. normalizing hardcoded DNs (e.g., removing spaces around ',')
. setting correct DN syntax to nsslapd-suffix, nsslapd-ldapiautodnsuffix,
costemplatedn, nsslapd-changelogsuffix, nsBaseDN, nsBindDN
Related bugs:
Bug 199923 - subtree search fails to find items under a db containing
special
characters
Bug 567968 - subtree/user level password policy created using 389-ds-console
doesn't work.
Bug 570107 - The import of LDIFs with base-64 encoded DNs fails, modrdn with
non-ASCII new rdn incorrect
Bug 570962 - ns-inactivate.pl does not work
Bug 572785 - DN syntax: old style of DN <type>="<DN>",<the_rest> is not
correctly normalized
Bug 573060 - DN normalizer: ESC HEX HEX is not normalized
Bug 574167 - An escaped space at the end of the RDN value is not handled
correctly