https://fedorahosted.org/389/ticket/342https://fedorahosted.org/389/attachment/ticket/342/0001-Ticket-342-better-e…
Bug description: ACL cache overflow error message is not very clear
and repeated too many times.
Fix description:
1) print a message like this:
Your ACL cache of %d slots has overflowed. This can happen
when you have many ACIs. This ACI evaluation requires %d
slots to cache. You can increase your max value by setting
the attribute nsslapd-aclpb-max-selected-acls in cn=ACL
Plugin,cn=plugins,cn=config to a value higher. A server
restart is required.
2) print the error message only once per ACI evaluation instead
of hundreds of times
This is almost an entire rewrite of the script - so the script is being
recommitted as a whole.
Memory usage results:
Logconv.pl 6.1 (old script):
1 million lines: 2843256 k
5 million lines: 5118708 k
Logconv.pl 7.0 (new script):
1 million lines: 2026828 k
5 million lines: 2029848 k
https://fedorahosted.org/389/ticket/419https://fedorahosted.org/389/attachment/ticket/419/0001-Ticket-419-logconv.…
Thanks,
Mark
--
Mark Reynolds
Red Hat, Inc
mreynolds(a)redhat.com
https://fedorahosted.org/389/ticket/537https://fedorahosted.org/389/attachment/ticket/537/0001-Ticket-537-Improvem…
Thanks to Rich for his reviews and comments. I've added the read
transaction abort in case idl_new_fetch / idl_new_range_fetch failed in
the transaction.
Fix description: The index range search function index_range
_read_ext was written to call idl_fetch_ext to get an idlist
belonging to one key. Then add it to the main idlist as long
as the key satisfiles the range search filter condition.
This patch introduces a new range search function idl_new_
range_fetch to the new idl code, which generates an idlist
in one idl function that eliminates the redundancy such as
generating idlist and cursor per key.
This patch only implements the new idl version. If idl_new
is not set, the existing code is executed.
*Additionally, idl_new_fetch did not abort the read transaction**
**even if any error occurred in the transaction. Now, it switches**
**between commit and abort based upon the result.*
https://fedorahosted.org/389/ticket/545https://fedorahosted.org/389/attachment/ticket/545/0001-Ticket-545-Segfault…
Bug description: If an attribute type having multiple values exists
in an entry, and any compare function is not associated with the
attribute type, fast_dup_check flag was not disabled from the second
time. Since fast_dup_check requires the compare function based on
the attribute syntax, it causes the segfault.
Fix description: This patch checks whether a compare function is
associated with the multi-valued attribute not just at the first
time the attribute type appears but at the second time and after,
and disable fast_dup_check properly if needed.
https://fedorahosted.org/389/ticket/537https://fedorahosted.org/389/attachment/ticket/537/0001-Ticket-537-Improvem…
Fix description: The index range search function index_range
_read_ext was written to call idl_fetch_ext to get an idlist
belonging to one key. Then add it to the main idlist as long
as the key satisfiles the range search filter condition.
This patch introduces a new range search function idl_new_
range_fetch to the new idl code, which generates an idlist
in one idl function that eliminates the redundancy such as
generating idlist and cursor per key.
This patch only implements the new idl version. If idl_new
is not set, the existing code is executed.
https://fedorahosted.org/389/ticket/542https://fedorahosted.org/389/attachment/ticket/542/0001-Ticket-542-Cannot-d…
Fix description: Based on the proposal made by rmeggins(a)redhat.com
in the ticket #542, this patch sets maxbersize every time before
reading the client input from the socket.
If the incoming ber size is larger than maxbersize, access log logs:
[..] conn=# op=-1 fd=64 closed error 34 (Numerical result out of range) -
B2
And the error log logs:
[..] connection - conn=# fd=# Incoming BER Element was too long, max
allowable is # bytes. Change the nsslapd-maxbersize attribute in
cn=config to increase.