[Fedora-directory-users] white space at the end of attributes that refuses to go away

[Edward Capriolo]

I am having an issue that may be related to multi-master replication,
or it may be related to a non viewable ascii value in an attribute.

We have a custom schema. We have a multivalued attribute
departalloweddomain

this attribute has three values inside it.
  "a.com"
  "b.com  "
  "c.com "

My goal is to remove the trailing white space. Which may be a space or
a weird character.

I have tried deleting the individual values and re-adding them.
I attempted to delete the entire attribute and re-add.

The value keeps appearing like so.

"b.com  "

Any ideas on how to clean this up. We do thousands of add and remove
operations a day and this has happened a few times.

[Dan Lannom]

Eddie C wrote:
> I am having an issue that may be related to multi-master replication,
> or it may be related to a non viewable ascii value in an attribute.
>
> We have a custom schema. We have a multivalued attribute
> departalloweddomain
>
> this attribute has three values inside it.
>   "a.com"
>   "b.com  "
>   "c.com "
>
> My goal is to remove the trailing white space. Which may be a space or
> a weird character.

You can determine what the white space is by saving an .ldif 
representation  [ldapsearch -LLL ... > file]and viewing with a program
that views hexcodes like xxd.
> I have tried deleting the individual values and re-adding them.
> I attempted to delete the entire attribute and re-add.
>
> The value keeps appearing like so.
>
> "b.com  "

Try editing the .ldif file above and removing the extra characters, 
modify enough of the attributes so that its unique and add it into the 
directory using ldapmodify or other standard tool.  If this still shows 
a problem then there is something very unusual about your configuration. 
   If importing the .ldif file is clean I would suspect the technique 
used to normally add the attributes.

Dan Lannom

[Fedora-directory-users] new installation - console working but web can not find objects

[ergoxsx]

hi,

am a directory service newbie and i just got fedora-ds installed on 
fedora 7.
i can search users/objects thru console but web can not do any search.

message is the ff:

------------------------------------------
Forbidden

You don't have permission to access /dsgw/bin/lang on this server.

------------------------------------------

same message for any kind of search thru the web.
tried to change permissions for dsgw but nothing changed.

any idea?

TIA.

-ergo-

[Fedora-directory-users] new installation - console working but web can not find objects

[Rich Megginson]

ergoxsx wrote:
> hi,
>
> am a directory service newbie and i just got fedora-ds installed on 
> fedora 7.
> i can search users/objects thru console but web can not do any search.
>
> message is the ff:
>
> Forbidden
>
> You don't have permission to access /dsgw/bin/lang on this server.
>
> same message for any kind of search thru the web.
> tried to change permissions for dsgw but nothing changed.
>
> any idea?

Check the access and error logs for the admin server - 
/opt/fedora-ds/admin-serv/logs
> TIA.
>
> -ergo-
>
> -- 
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Fedora-directory-users] new installation - console working but web can not find objects

[ergoxsx]

/opt/fedora-ds/admin-serv/logs shows the following.
ldap.abc.com is registered in local dns server and also in /etc/hosts.

[Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] 
admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.2, 
referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch

any ideas?

Richard Megginson wrote:
> ergoxsx wrote:
> > hi,
> >
> > am a directory service newbie and i just got fedora-ds installed on 
> > fedora 7.
> > i can search users/objects thru console but web can not do any search.
> >
> > message is the ff:
> >
> > Forbidden
> >
> > You don't have permission to access /dsgw/bin/lang on this server.
> >
> > same message for any kind of search thru the web.
> > tried to change permissions for dsgw but nothing changed.
> >
> > any idea?
>
> Check the access and error logs for the admin server - 
> /opt/fedora-ds/admin-serv/logs
> > TIA.
> >
> > -ergo-
> >
> > -- 
> > Fedora-directory-users mailing list
> > [e-mail]
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
> --
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Fedora-directory-users] new installation - console working but web can not find objects

[Rich Megginson]

ergoxsx wrote:
> /opt/fedora-ds/admin-serv/logs shows the following.
> ldap.abc.com is registered in local dns server and also in /etc/hosts.
>
> [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] 
> admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.2, 
> referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch

Can you see the request for dsgw/bin/lang in the access log?
> any ideas?
>
> Richard Megginson wrote:
> > ergoxsx wrote:
> > > hi,
> > >
> > > am a directory service newbie and i just got fedora-ds installed on 
> > > fedora 7.
> > > i can search users/objects thru console but web can not do any search.
> > >
> > > message is the ff:
> > >
> > > Forbidden
> > >
> > > You don't have permission to access /dsgw/bin/lang on this server.
> > >
> > > same message for any kind of search thru the web.
> > > tried to change permissions for dsgw but nothing changed.
> > >
> > > any idea?
> >
> > Check the access and error logs for the admin server - 
> > /opt/fedora-ds/admin-serv/logs
> > > TIA.
> > >
> > > -ergo-
> > >
> > > -- 
> > > Fedora-directory-users mailing list
> > > [e-mail]
> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> > -- 
> > Fedora-directory-users mailing list
> > [e-mail]
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
> -- 
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Fedora-directory-users] new installation - console working but web can not find objects

[ergoxsx]

ah, sorry... here it is:

[Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] 
admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, 
referer: 
http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=intro.htm...
[Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] 
admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, 
referer: 
http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.htm...
[Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] 
admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, 
referer: 
http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.htm...

what does this mean? 
i tried to change permissions but same type of output.

Richard Megginson wrote:
> ergoxsx wrote:
> > /opt/fedora-ds/admin-serv/logs shows the following.
> > ldap.abc.com is registered in local dns server and also in /etc/hosts.
> >
> > [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] 
> > admserv_host_ip_check: ap_get_remote_host could not resolve 
> > 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch
>
> Can you see the request for dsgw/bin/lang in the access log?
> > any ideas?
> >
> > Richard Megginson wrote:
> > > ergoxsx wrote:
> > > > hi,
> > > >
> > > > am a directory service newbie and i just got fedora-ds installed on 
> > > > fedora 7.
> > > > i can search users/objects thru console but web can not do any search.
> > > >
> > > > message is the ff:
> > > >
> > > > Forbidden
> > > >
> > > > You don't have permission to access /dsgw/bin/lang on this server.
> > > >
> > > > same message for any kind of search thru the web.
> > > > tried to change permissions for dsgw but nothing changed.
> > > >
> > > > any idea?
> > >
> > > Check the access and error logs for the admin server - 
> > > /opt/fedora-ds/admin-serv/logs
> > > > TIA.
> > > >
> > > > -ergo-
> > > >
> > > > -- 
> > > > Fedora-directory-users mailing list
> > > > [e-mail]
> > > > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > >
> > > -- 
> > > Fedora-directory-users mailing list
> > > [e-mail]
> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> > -- 
> > Fedora-directory-users mailing list
> > [e-mail]
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
> --
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Fedora-directory-users] new installation - console working but web can not find objects

[Rich Megginson]

ergoxsx wrote:
> ah, sorry... here it is:
>
> [Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] 
> admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, 
> referer: 
> http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=intro.htm...
> [Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] 
> admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, 
> referer: 
> http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.htm...
> [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] 
> admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, 
> referer: 
> http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.htm...
>
> what does this mean?

This message is usually benign.
> i tried to change permissions but same type of output.

This looks like the output from the error log.  Can you find the 
corresponding request from the access log?
> Richard Megginson wrote:
> > ergoxsx wrote:
> > > /opt/fedora-ds/admin-serv/logs shows the following.
> > > ldap.abc.com is registered in local dns server and also in /etc/hosts.
> > >
> > > [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] 
> > > admserv_host_ip_check: ap_get_remote_host could not resolve 
> > > 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch
> >
> > Can you see the request for dsgw/bin/lang in the access log?
> > > any ideas?
> > >
> > > Richard Megginson wrote:
> > > > ergoxsx wrote:
> > > > > hi,
> > > > >
> > > > > am a directory service newbie and i just got fedora-ds installed 
> > > > > on fedora 7.
> > > > > i can search users/objects thru console but web can not do any 
> > > > > search.
> > > > >
> > > > > message is the ff:
> > > > >
> > > > > Forbidden
> > > > >
> > > > > You don't have permission to access /dsgw/bin/lang on this server.
> > > > >
> > > > > same message for any kind of search thru the web.
> > > > > tried to change permissions for dsgw but nothing changed.
> > > > >
> > > > > any idea?
> > > >
> > > > Check the access and error logs for the admin server - 
> > > > /opt/fedora-ds/admin-serv/logs
> > > > > TIA.
> > > > >
> > > > > -ergo-
> > > > >
> > > > > -- 
> > > > > Fedora-directory-users mailing list
> > > > > [e-mail]
> > > > > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > > >
> > > > -- 
> > > > Fedora-directory-users mailing list
> > > > [e-mail]
> > > > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > >
> > > -- 
> > > Fedora-directory-users mailing list
> > > [e-mail]
> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> > -- 
> > Fedora-directory-users mailing list
> > [e-mail]
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
> -- 
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Edward Capriolo]

I have tried adding/removing these attributes a number of different
ways. LDIF/LDAP Browser/ FDS admin console. I fully remove the values
and the entire attribute but when I re-add them they keep having extra
spaces in the end. I almost believe the entry is corrupted in some
way.

I do not want to do anything very drastic because only this one entry
is showing problems (that I know of)

On 9/24/07, Dan Lannom  wrote:
> Eddie C wrote:
> > I am having an issue that may be related to multi-master replication,
> > or it may be related to a non viewable ascii value in an attribute.
> >
> > We have a custom schema. We have a multivalued attribute
> > departalloweddomain
> >
> > this attribute has three values inside it.
> >   "a.com"
> >   "b.com  "
> >   "c.com "
> >
> > My goal is to remove the trailing white space. Which may be a space or
> > a weird character.
>
> You can determine what the white space is by saving an .ldif
> representation  [ldapsearch -LLL ... > file]and viewing with a program
> that views hexcodes like xxd.
> > I have tried deleting the individual values and re-adding them.
> > I attempted to delete the entire attribute and re-add.
> >
> > The value keeps appearing like so.
> >
> > "b.com  "
>
> Try editing the .ldif file above and removing the extra characters,
> modify enough of the attributes so that its unique and add it into the
> directory using ldapmodify or other standard tool.  If this still shows
> a problem then there is something very unusual about your configuration.
>    If importing the .ldif file is clean I would suspect the technique
> used to normally add the attributes.
>
> Dan Lannom
>
> --
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Ulf Weltman]

When attribute values are deleted from entries in a replicated partition 
they are moved to a hidden state, they need to be kept around in case 
they need to be resurrected by the update resolution protocol.  If you 
add the same value after deleting it, the underlying mechanism moves it 
back from the hidden state.  I wonder if it's considering the old value 
equivalent to what you're trying to add.  I'm pretty sure spaces don't 
slip through though, can you verify what character codes the trailing 
characters are so I can test it?

Ulf

Eddie C wrote:
> I have tried adding/removing these attributes a number of different
> ways. LDIF/LDAP Browser/ FDS admin console. I fully remove the values
> and the entire attribute but when I re-add them they keep having extra
> spaces in the end. I almost believe the entry is corrupted in some
> way.
>
> I do not want to do anything very drastic because only this one entry
> is showing problems (that I know of)
>
> On 9/24/07, Dan Lannom  wrote:
> > Eddie C wrote:
> > > I am having an issue that may be related to multi-master replication,
> > > or it may be related to a non viewable ascii value in an attribute.
> > >
> > > We have a custom schema. We have a multivalued attribute
> > > departalloweddomain
> > >
> > > this attribute has three values inside it.
> > >   "a.com"
> > >   "b.com  "
> > >   "c.com "
> > >
> > > My goal is to remove the trailing white space. Which may be a space or
> > > a weird character.
> >
> > You can determine what the white space is by saving an .ldif
> > representation  [ldapsearch -LLL ... > file]and viewing with a program
> > that views hexcodes like xxd.
> > > I have tried deleting the individual values and re-adding them.
> > > I attempted to delete the entire attribute and re-add.
> > >
> > > The value keeps appearing like so.
> > >
> > > "b.com  "
> >
> > Try editing the .ldif file above and removing the extra characters,
> > modify enough of the attributes so that its unique and add it into the
> > directory using ldapmodify or other standard tool.  If this still shows
> > a problem then there is something very unusual about your configuration.
> >    If importing the .ldif file is clean I would suspect the technique
> > used to normally add the attributes.
> >
> > Dan Lannom
> >
> > --
> > Fedora-directory-users mailing list
> > [e-mail]
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
> --
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Gordon Messmer]

Ulf Weltman wrote:
> When attribute values are deleted from entries in a replicated partition 
> they are moved to a hidden state, they need to be kept around in case 
> they need to be resurrected by the update resolution protocol.  If you 
> add the same value after deleting it, the underlying mechanism moves it 
> back from the hidden state.  I wonder if it's considering the old value 
> equivalent to what you're trying to add.  I'm pretty sure spaces don't 
> slip through though, can you verify what character codes the trailing 
> characters are so I can test it?

I think they do... I've seen this same problem previously under Sun's 
directory server.

[Edward Capriolo]

Just for reference this was some error with replication. When I found
the entry on our second multi-master server the spacing was different
then the first. After I corrected the second and modified the values
again everything corrected itself.

Some how the data fell out of sync and refused to get back in-sync
unless it was dealt with on both machines.

On 9/25/07, Gordon Messmer  wrote:
> Ulf Weltman wrote:
> > When attribute values are deleted from entries in a replicated partition
> > they are moved to a hidden state, they need to be kept around in case
> > they need to be resurrected by the update resolution protocol.  If you
> > add the same value after deleting it, the underlying mechanism moves it
> > back from the hidden state.  I wonder if it's considering the old value
> > equivalent to what you're trying to add.  I'm pretty sure spaces don't
> > slip through though, can you verify what character codes the trailing
> > characters are so I can test it?
>
> I think they do... I've seen this same problem previously under Sun's
> directory server.
>
> --
> Fedora-directory-users mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-directory-users