[Fedora-directory-devel] Please Review: (474621) Adding a user with nsuniqueid in the RDN creates an illegal entry
https://bugzilla.redhat.com/show_bug.cgi?id=474621
Resolves: bug 474621
Bug Description: If you add an entry using a create attribute in the RDN
(such as nsuniqueid), the entry will be added, but the value used in the
RDN will not exist in the entry. The same issue occurs with performing
a MODRDN operation using a created attribute in the new RDN.
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: The fix checks if the common created attributes are used
as the RDN for both ADD and MODRDN operations. We disallow using
nsuniqueid,
creatorsName, modifiersName, modifiedTimestamp, and createTimestamp in the
RDN for an external ADD operation. For a MODRDN, we disallow the same
attributes in the new RDN with the exception of nsuniqueid. We want to
allow nsuniqueid in the RDN from internal operations for replication
conflict
entries.
The client will receive an LDAP_INVALID_DN_SYNTAX result if they violate
the above rules.
Platforms tested: F9
Flag Day: no
Doc impact: no
QA impact: should be covered by regular nightly and manual testing
New Tests integrated into TET: none
https://bugzilla.redhat.com/attachment.cgi?id=327773&action=diff