Re: [389-users] Protocol error in proxied operations

[Rich Megginson]

On 12/12/2011 06:53 AM, Juan Asensio Sánchez wrote:
>  Hi
>
>  I am trying to test the proxied operations in 389 DS. For now, I have
>  written a small script using UnboundID LDAP SDK [1]:
>
>  ModifyRequest modifyRequest = new
>  ModifyRequest("uid=XXXXXXXX,ou=People,o=XXXXXXXX,dc=XXXXXXXX,dc=XXXXXXXX",
>  new Modification(ModificationType.REPLACE, "address", "Nueva
>  dirección"));
>  modifyRequest.addControl(new ProxiedAuthorizationV2RequestControl(
>  "dn:" + proxiedUserEntry.getDN()) );
>
>  try
>  {
>       LDAPResult modifyResult =
>  ldapConnectable.getConnection(session).modify(modifyRequest);
>       // If we got here, then the modify was successful.
>  }
>  catch (LDAPException le)
>  {
>       System.out.println(le.getDiagnosticMessage() + " (" +
>  le.getResultCode() + ")");
>  }
>
>  Although I have not yet assigned any ACIS as described in [2], I
>  supposed to get a denied response, not a protocol error as I get:
>
>  unable to parse proxied authorization control (2 (protocol error))
>
>  I think this error is returned by the LDAP server, although it is not
>  reported in the error LOG. Anyone has experienced with proxied
>  operations? 
Please file a bug at
https://bugzilla.redhat.com/enter_bug.cgi?product=389
>  [1] http://www.unboundid.com/products/ldapsdk/docs/javadoc/index.html
>  [2]
> http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Admin...
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users