Mailing-List: contact users-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@directory.apache.org
Received-SPF: pass (herse.apache.org: domain of akarasulu@gmail.com designates
 66.249.82.232 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:references:x-google-sender-auth;
        b=dQgffe94cNMaZQGCXCGEO2iA2bONukt7fUOW/XZSj0WYGcodSvJguRt3lCb2gRAb7pcO6bOR1vhLoy78W1714jof+BJlf21QtApp7nLdrW8suLFwQtACP2ZPK87qfmlGvfZvDBjmLlyfTv/Wvld/tEQ/JLThs4D8Wp5BLgAmClM=
Message-ID: <a32f6b020703251626m67634b19o8dcac52fadad8516@mail.gmail.com>
Date: Sun, 25 Mar 2007 19:26:00 -0400
From: "Alex Karasulu" <akarasulu@apache.org>
Sender: akarasulu@gmail.com
To: users@directory.apache.org
Subject: Re: [ApacheDS Authorization] HELP - Server will no longer start
In-Reply-To: <a1b4a6610703240011g52a93737n1d09169eeff637b3@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_105807_22120572.1174865160820"
References: <bb8e2ac20703212055y18c67a08iebebe4f99270eed7@mail.gmail.com>
	 <a1b4a6610703222218u49c440ffw5b3a4ac0bcbb03d@mail.gmail.com>
	 <bb8e2ac20703231500h2fd750d7se50fc03d1055174f@mail.gmail.com>
	 <a1b4a6610703231504kac98a66hf22ac96c2be1d46a@mail.gmail.com>
	 <bb8e2ac20703231519t675c9e45wc23cd7df0f781264@mail.gmail.com>
	 <a1b4a6610703240011g52a93737n1d09169eeff637b3@mail.gmail.com>

------=_Part_105807_22120572.1174865160820
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

The interceptor's tuple case may still be initialized even though the
interceptor is really not doing any work.  The problem is perhaps due to
it's encountering a bad ACIITem and blowing chunks.

Alex


On 3/24/07, Ersin Er <ersin.er@gmail.com> wrote:
>
> On 3/24/07, Tim Quinn <jpyobjcdude@gmail.com> wrote:
> >
> > >
> > > As it's currently implemented if accessControlEnabled is set to false
> > > authz.AuthorizationService does not make any authorization operations
> > and
> > > just bypasses the requests (and responses). So you rproblem may be
> > related
> > > to something different.
> > >
> >
> >
> > I just verified again. By removing just the last close curly brace, the
> > start fails with the following
> >
> > ~snip~
> > 2007-03-23 18:12:13,062 [Thread-0] WARN  191 TupleCache.subentryAdded -
> > ACIItem parser failure on 'null'. Cannnot add ACITuples to TupleCache.
> > java.text.ParseException: Parser failure on ACIItem:
> >         {
> >    identificationTag "enableSearchForADSGenReader_ACI",
> >    precedence 10,
> >    authenticationLevel none,
> >    itemOrUserFirst userFirst:
> >    {
> >      userClasses
> >      {
> >        name { "uid=ADSGenReader,ou=admin,ou=system" }
> >      },
> >      userPermissions
> >      {
> >        {
> >          protectedItems { entry, allUserAttributeTypesAndValues },
> >          grantsAndDenials { grantRead, grantBrowse, grantReturnDN,
> >                             grantCompare, grantFilterMatch,
> > grantDiscloseOnError }
> >        },
> >        {
> >          protectedItems { attributeType { userPassword } },
> >          grantsAndDenials { denyRead, denyCompare, denyFilterMatch }
> >        }
> >      }
> > }
> > Antlr exception trace:
> > expecting CLOSE_CURLY, found 'null'
> >         at org.apache.directory.shared.ldap.aci.ACIItemParser.parse(
> > ACIItemParser.java:128)
> >         at
> org.apache.directory.server.core.authz.TupleCache.subentryAdded
> > (
> > TupleCache.java:186)
> > ~/snip~
> >
> > This error shows up and the server fails to start regardless of the
> > accessControlEnabled setting in config.xml.
> >
> > If you want, I can build up a test case on a OOTB fresh installation to
> > make
> > sure that it is not related to some of my own jars.
>
>
> Test cases are always greatly appreciated :-)
>
> ..TQ
> >
>
>
>
> --
> Ersin
>

------=_Part_105807_22120572.1174865160820--