[389-devel] Default vlv aci

2016-06-20 Thread William Brown
Hi, Given we are looking at these at the moment, I was wondering what the purpose of this ACI is "aci: (targetattr != \"aci\")(version 3.0; acl \"VLV Request Control\"; allow( read, search, compare, proxy ) userdn = \"ldap:///all\";;)\n", It's on oid=2.16.840.1.113730.3.4.9,cn=features,cn=config

[389-devel] Please review: 48893 cn=snmp,cn=config remove anonymous read

2016-06-20 Thread William Brown
https://fedorahosted.org/389/ticket/48893 https://fedorahosted.org/389/attachment/ticket/48893/0001-Ticket-48893-cn-config-should-not-have-readable-comp.patch -- Sincerely, William Brown Software Engineer Red Hat, Brisbane signature.asc Description: This is a digitally signed message part --

[389-devel] Please review: Change of default ACI in DS

2016-06-20 Thread William Brown
https://fedorahosted.org/389/ticket/48354 https://fedorahosted.org/389/attachment/ticket/48354/0001-Ticket-48354-Review-of-default-ACI-in-the-directory-.patch -- Sincerely, William Brown Software Engineer Red Hat, Brisbane signature.asc Description: This is a digitally signed message part --

[389-devel] Please review: [389 Project] #48892: Wrong result code display in audit-failure log

2016-06-20 Thread Noriko Hosoi
https://fedorahosted.org/389/ticket/48892 https://fedorahosted.org/389/attachment/ticket/48892/0001-Ticket-48892-Wrong-result-code-display-in-audit-fail.patch -- 389-devel mailing list 389-devel@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/389-devel@lists.fedoraproject.org

[389-devel] Re: Please review (additional fixes): [389 Project] #48755: moving an entry could make the online init fail

2016-06-20 Thread Noriko Hosoi
On 06/20/2016 02:20 AM, Ludwig Krispenz wrote: I have a question about your tombstone entry... You are using entrydn instead of entryrdn? no, sorry for the confusion, I was using ldapsearch to get teh tombstones, not dbscan Hmmm, if that's the case, I need to learn why you don't have the paren

[389-devel] Re: Please review (additional fixes): [389 Project] #48755: moving an entry could make the online init fail

2016-06-20 Thread Ludwig Krispenz
On 06/17/2016 09:16 PM, Noriko Hosoi wrote: On 06/17/2016 08:49 AM, Ludwig Krispenz wrote: On 06/17/2016 05:31 PM, Noriko Hosoi wrote: On 06/17/2016 12:17 AM, Ludwig Krispenz wrote: Hi Noriko, I still have a doubt on your fix. You now base the entries to be sent only on the parentid index,