[SAMBA4] Schema objectGUID causing a problem with OpenLDAP backend

Andrew Bartlett abartlet at samba.org
Tue Nov 17 23:52:10 MST 2009


On Wed, 2009-11-18 at 01:45 -0500, Endi Sukma Dewata wrote:
> ----- "Howard Chu" <hyc at symas.com> wrote:
> 
> > > We now choose the objectGUID for the schema elements.  I had hoped that
> > > the use of the 'relax' control would cause OpenLDAP to accept us
> > > choosing the GUIDs, but apparently not. 
> > > 
> > > Howard:  We need to choose the objectGUID for certain records.  How do
> > > we make OpenLDAP accept that?
> > > 
> > > We don't strictly need this against OpenLDAP, but it's going to be be
> > > pain to special case this.
> > 
> > The relax control is the right answer, but the fact you got this particular
> > error message indicates that you didn't attach the relax control to
> > this request.
> 
> I think we discussed about the relax control recently. At the time we
> decided to strip the relax control from the request so it's not passed
> to the backend:
> 
> http://gitweb.samba.org/?p=samba.git;a=commitdiff;h=68639bfd64f063d1c6e373a2fc276b2bbb7073ca
> 
> I think the reason was that the relax control was intended for the LDB
> modules, not for the LDAP backend. Should we now create a distinction
> between relax controls intended for LDB vs. backend? Or should we always
> send it to the backend?

If that's what it does, it's not the intention.  I had intended to send
it with no data. 

Perhaps we have the OID wrong. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20091118/9485aefc/attachment.pgp>


More information about the samba-technical mailing list