On Tue, 07 Dec 2010 13:28:15 -0500
Stephen Gallagher <sgallagh(a)redhat.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 12/07/2010 04:34 AM, Sumit Bose wrote:
> On Mon, Dec 06, 2010 at 10:29:02AM -0500, Simo Sorce wrote:
>> On Mon, 6 Dec 2010 15:29:44 +0100
>> Sumit Bose <sbose(a)redhat.com> wrote:
>>
>>>>
>>>>>>> OpenLDAP users might be happy if sssd would be able to
>>>>>>> autodetect OpenLDAP and use entryCSN. Do you think check
for
>>>>>>> the OpenLDAProotDSE objectclass would be sufficient here?
>>>>>>
>>>>>> Yes, give me the details and I can add that easily.
>>>>>
>>>>> I think the only detail is the OpenLDAProotDSE objectclass. I
>>>>> haven't found anything else in the OpenLDAP rootDSE which can
>>>>> help here.
>>>>
>>>> Which attribute does openLdap uses on entries ?
>>>> entryUSN or USNChanged ?
>>>
>>> entryCSN, see
http://www.openldap.org/faq/data/cache/1145.html for
>>> details.
>>
>> It is not clear to me that entryCSN is server specific and always
>> orders new entries at top, the format is also quite complex.
>> It is also not clear if access to it is available to anonymous
>> clients.
>
> iirc entryCSN is used by OpenLDAP during replication so I would
> expect that newer entries get "larger" entryCSNs.
>
>>
>> If you do not mind I would defer implementation of its support to a
>> separate ticket/patch.
>
> ok, let's move this into a new ticket. This means
>
> ACK
>
> to the current version of the patches.
Nack: fails to compile
../src/providers/ldap/ldap_id.c: In function 'sdap_check_online_done':
../src/providers/ldap/ldap_id.c:676:5: error: implicit declaration of
function 'sdap_cli_connect_recv_ext'
Oops should have rebuilt from scratch when I finally merged
sdap_cli_connect_recv() and sdap_cli_connect_recv_ext().
Attached rebased patchset that compiles properly.
Simo.
--
Simo Sorce * Red Hat, Inc * New York