Mark Reynolds wrote:
On 9/2/21 3:04 PM, Rob Crittenden wrote:
> In IPA I'm trying to set the value of nsslapd-sizelimit in cn=config
> online using our LDAP tool. It is failing with LDAP error 16. What I'm
> seeing is:
>
> ipapython.ipaldap: DEBUG: update_entry modlist [(1, 'nsslapd-sizelimit',
> [b'2000']), (0, 'nsslapd-sizelimit', [b'100000'])]
> ldap.NO_SUCH_ATTRIBUTE: {'msgtype': 103, 'msgid': 16,
'result': 16,
> 'desc': 'No such attribute', 'ctrls': []
>
> Basically I'm trying to delete the original value and adding a new one.
So you are doing two mods? MOD_DELETE and MOD_ADD? Yeah that won't
work, needs to be MOD_REPLACE
cn=config does behave differently with attributes in the top cn=config
entry. It's been this way for years, so I'm surprised to see an issue
being raised about it now. But, basically we stopped filling in the
cn=config entry in dse.ldif with all these config attributes and instead
made them all "invisible defaults". So if the attribute is not changed
after install then trying to delete that attribute will fail.
I see it now. If IPA can't determine that an attribute is single-value
then it does a DELETE/ADD instead of a REPLACE. nsslapd-sizelimit isn't
in schema yet so it is assumed to be multi-valued.
I can add an exception in IPA.
thanks
rob
Mark
>
> It seems like cn=config is being treated differently.
>
> rob
> _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
>
> Do not reply to spam on the list, report it:
>
https://pagure.io/fedora-infrastructure