Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Received-SPF: pass (nike.apache.org: domain of mikeatdot@gmail.com designates
 209.85.216.171 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        b=dwZcGfS7+xm9oT2nXGAQhO7U8I8MiqXNnf/UKcNmEbA8ZfY9z/Qg1wKygghJjghsgD
         bn2mdOZEnHsEawGB+VK70IkrSUast4PZI8iVVHGxGOGbLYlWdk7Q5/XXcMpKw1oKbtiU
         KhLYQPzfN9zIxtKPxYRSlt4H2HkeWUcyHg9a0=
MIME-Version: 1.0
In-Reply-To: <BANLkTik5tPxnDLk5P65Mk2MrMrA-RDfSdA@mail.gmail.com>
References: <BANLkTi=G+=7YvYx2pboqfLJMVDKYbiFNCA@mail.gmail.com>
	<BANLkTik5tPxnDLk5P65Mk2MrMrA-RDfSdA@mail.gmail.com>
Date: Fri, 17 Jun 2011 16:25:25 +0100
Message-ID: <BANLkTimvgMvRS1OfTvU8KFTV7q6sa0j4cw@mail.gmail.com>
Subject: Re: Getting a LdapSchemaViolationException when modifying a
 prescriptiveAci on an administrativeSubEntry
From: Mike Adamson <mikeatdot@gmail.com>
To: Apache Directory Developers List <dev@directory.apache.org>
Content-Type: multipart/alternative; boundary=bcaec51a8c80b0a39204a5e9fe4d

--bcaec51a8c80b0a39204a5e9fe4d
Content-Type: text/plain; charset=ISO-8859-1

Hi,

I will raise one first thing on Monday, unfortunately I've been told I've
got to stop now and pack the car.

I have managed to work around this problem for the time being by using the
adminSession to set the acis but this isn't ideal because it loses the audit
trail.

MikeA

On 17 June 2011 16:14, Kiran Ayyagari <kayyagari@apache.org> wrote:

> Hi Mike, this seems to be a side effect of the recent changes done to the
> lookup() method, can you file a bug report in JIRA, thanks
>
> On 17-Jun-2011 7:48 PM, "Mike Adamson" <mikeatdot@gmail.com> wrote:
>
> Hi,
>
> I am attempting to replace a prescriptiveAci on a sub entry using:
>
> Entry subEntry = session.lookup(subEntryDn, "+");
> ModifyRequest modifyRequest = new
> ModifyRequestImpl().setName(subEntryDn).replace("prescriptiveAci", aci);
> session.modify(modifyRequest);
>
> but this always throws a LdapSchemaViolationException.
>
> I have done some debugging in the code and found that this is coming from
> the TupleCache.hasPrecriptiveAci method. It is thrown because this methods
> identifies the dn as an administrative sub entry but can't find the
> precriptiveAci on it. The root cause of this is this code at the bottom of
> the AciAuthorizationInterceptor.modify method:
>
>         Entry modifiedEntry = modifyContext.lookup( dn,
> ByPassConstants.LOOKUP_BYPASS );
>         tupleCache.subentryModified( dn, mods, modifiedEntry );
>
> This lookup does not return the operationalAttributes so will always fail
> when modifying an operationalAttribute.
>
> Is this by design? E.g. is it not possible to modify operationalAttributes
> in this way.
>
> Thanks,
>
> Mike Adamson
>
>
>

--bcaec51a8c80b0a39204a5e9fe4d
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi,<br><br>I will raise one first thing on Monday, unfortunately I&#39;ve b=
een told I&#39;ve got to stop now and pack the car.<br><br>I have managed t=
o work around this problem for the time being by using the adminSession to =
set the acis but this isn&#39;t ideal because it loses the audit trail.<br>
<br>MikeA<br><br><div class=3D"gmail_quote">On 17 June 2011 16:14, Kiran Ay=
yagari <span dir=3D"ltr">&lt;<a href=3D"mailto:kayyagari@apache.org">kayyag=
ari@apache.org</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<p>Hi Mike, this seems to be a side effect of the recent changes done to th=
e lookup() method, can you file a bug report in JIRA, thanks</p><div><div><=
/div><div class=3D"h5">
<p></p><blockquote type=3D"cite">On 17-Jun-2011 7:48 PM, &quot;Mike Adamson=
&quot; &lt;<a href=3D"mailto:mikeatdot@gmail.com" target=3D"_blank">mikeatd=
ot@gmail.com</a>&gt; wrote:<br><br>Hi,<br><br>I am attempting to replace a =
prescriptiveAci on a sub entry using:<br>

<br>Entry subEntry =3D session.lookup(subEntryDn, &quot;+&quot;);<br>Modify=
Request modifyRequest =3D new ModifyRequestImpl().setName(subEntryDn).repla=
ce(&quot;prescriptiveAci&quot;, aci);<br>
session.modify(modifyRequest);<br><br>but this always throws a LdapSchemaVi=
olationException.<br><br>I have done some debugging in the code and found t=
hat this is coming from the TupleCache.hasPrecriptiveAci method. It is thro=
wn because this methods identifies the dn as an administrative sub entry bu=
t can&#39;t find the precriptiveAci on it. The root cause of this is this c=
ode at the bottom of the AciAuthorizationInterceptor.modify method:<br>


<br>=A0=A0=A0=A0=A0=A0=A0 Entry modifiedEntry =3D modifyContext.lookup( dn,=
 ByPassConstants.LOOKUP_BYPASS );<br>=A0=A0=A0=A0=A0=A0=A0 tupleCache.suben=
tryModified( dn, mods, modifiedEntry );<br><br>This lookup does not return =
the operationalAttributes so will always fail when modifying an operational=
Attribute.<br>


<br>Is this by design? E.g. is it not possible to modify operationalAttribu=
tes in this way.<br><br>Thanks,<br><font color=3D"#888888"><br>Mike Adamson=
<br><br><br>
</font></blockquote><p></p>
</div></div></blockquote></div><br>

--bcaec51a8c80b0a39204a5e9fe4d--