Return-Path: X-Original-To: apmail-directory-dev-archive@www.apache.org Delivered-To: apmail-directory-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 18B2FE82A for ; Tue, 22 Jan 2013 14:44:16 +0000 (UTC) Received: (qmail 22143 invoked by uid 500); 22 Jan 2013 14:44:15 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 21930 invoked by uid 500); 22 Jan 2013 14:44:14 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 21837 invoked by uid 99); 22 Jan 2013 14:44:13 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 22 Jan 2013 14:44:13 +0000 Date: Tue, 22 Jan 2013 14:44:13 +0000 (UTC) From: "Kiran Ayyagari (JIRA)" To: dev@directory.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (DIRSERVER-1792) Replication and Modification of ACIs MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/DIRSERVER-1792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13559679#comment-13559679 ] Kiran Ayyagari commented on DIRSERVER-1792: ------------------------------------------- Ah good, thanks for testing and the report. > Replication and Modification of ACIs > ------------------------------------ > > Key: DIRSERVER-1792 > URL: https://issues.apache.org/jira/browse/DIRSERVER-1792 > Project: Directory ApacheDS > Issue Type: Bug > Affects Versions: 2.0.0-M9 > Environment: Linux 64bit > OpenJDK Runtime Environment (IcedTea6 1.8.13) (6b18-1.8.13-0+squeeze2) > Reporter: Michael Simon > Fix For: 2.0.0-M10 > > Attachments: repl-problem.zip > > > Creating an ou with administrativeRole set works and replicates on the Slave nodes. Modifying the administrativeRole to accessControlSpecificArea for example on an existing ou throws an Exception: > [13:04:07] ERROR [org.apache.directory.server.core.schema.SchemaInterceptor] - ERR_54 Cannot add a value which is already present : organizationalUnit > [13:04:07] ERROR [org.apache.directory.server.ldap.replication.consumer.ReplicationConsumerImpl] - ERR_54 Cannot add a value which is already present : organizationalUnit > org.apache.directory.api.ldap.model.exception.LdapAttributeInUseException: ERR_54 Cannot add a value which is already present : organizationalUnit > at org.apache.directory.server.core.schema.SchemaInterceptor.checkModifyEntry(SchemaInterceptor.java:739) > at org.apache.directory.server.core.schema.SchemaInterceptor.modify(SchemaInterceptor.java:1184) > at org.apache.directory.server.core.api.interceptor.BaseInterceptor.next(BaseInterceptor.java:577) > More or less the same things happens with accessControlSubentries. Creating an entry is working and replicating, but modifying the prescriptiveACI throws an exception: > [13:10:58] ERROR [org.apache.directory.server.core.schema.SchemaInterceptor] - ERR_52 Cannot modify the attribute : ATTRIBUTE_TYPE ( 1.3.6.1.4.1.18060.0.4.1.2.11 > NAME 'accessControlSubentries' > DESC Used to track a subentry associated with access control areas > EQUALITY distinguishedNameMatch > SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 > NO-USER-MODIFICATION > USAGE directoryOperation > ) > at org.apache.directory.server.core.schema.SchemaInterceptor.checkModifyEntry(SchemaInterceptor.java:716) > at org.apache.directory.server.core.schema.SchemaInterceptor.modify(SchemaInterceptor.java:1184) > at org.apache.directory.server.core.api.interceptor.BaseInterceptor.next(BaseInterceptor.java:577) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira