directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Emmanuel Lecharny (JIRA)" <j...@apache.org>
Subject [jira] Commented: (DIRSERVER-1524) ACI rules stop working for no reason, must be tweaked to "reawaken"
Date Mon, 05 Jul 2010 21:09:50 GMT

    [ https://issues.apache.org/jira/browse/DIRSERVER-1524?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12885344#action_12885344
] 

Emmanuel Lecharny commented on DIRSERVER-1524:
----------------------------------------------

No need to provide any ACI.

This is clearly a bug : the ACI cache which is updated when new ACI are added is cleared when
the server is shutdown, and is not currently restored when it starts again.

We are working on it, and will probably have a fix for that in the next days.

/me is a but stunned that this problem never popped before :/

> ACI rules stop working for no reason, must be tweaked to "reawaken"
> -------------------------------------------------------------------
>
>                 Key: DIRSERVER-1524
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1524
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 1.5.7
>         Environment: Ubuntu Lucid, pretty much stock
>            Reporter: Michael Scott Shappe
>            Priority: Critical
>
> I have two ACIs set up: one which allows users access to change their passwords; one
which allows anonymous search so the system can be used as an authenticator without needing
a hard-wired account to bind to.
> Every now and then, the anonymous search capability (both as an authenticator and when
tried with ldapsearch -x) simply stops working. Killing and restarting the server does not
restore it. Editing the ACI in any way, however -- changing its precedence for example --
immediately fixes it.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message