Approaches to ITS#8772

2017-11-24 Thread Ondřej Kuzník
If we add an expectation that recursive and simple mutexes can be (un)locked in the same way, we can remove the function aliases without incurring the useless duplication. The only target that would be affected is mach cthreads since it allegedly doesn't support recursive mutexes natively. I

VC exop and LDAPWhoAmI?

2017-11-24 Thread Ondřej Kuzník
Trying to get SASL bind support into the Load Balancer now and a bit stuck when it comes to figuring out what the resulting authorisation identity is (SASL or LDAP say it's backend specific) for use with the proxyauthz control. Passing the binds on is the simple one, we can just send an

Re: ACL checks and slapo-unique

2017-11-24 Thread Michael Ströder
Ondřej Kuzník wrote: > On Wed, Nov 15, 2017 at 05:09:31PM +0100, Michael Ströder wrote: >> HI! >> >> What really strikes users is the lack of feedback in case a unique >> constraint or other constraint fails. >> >> Let's look at error messages of slapo-unique first. I'm experimenting >> with a

Re: ACL checks and slapo-unique

2017-11-24 Thread Ondřej Kuzník
On Wed, Nov 15, 2017 at 05:09:31PM +0100, Michael Ströder wrote: > HI! > > What really strikes users is the lack of feedback in case a unique > constraint or other constraint fails. > > Let's look at error messages of slapo-unique first. I'm experimenting > with a pretty simple patch for