From api-return-1134-archive-asf-public=cust-asf.ponee.io@directory.apache.org Fri Jun 25 14:00:57 2021 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mxout1-ec2-va.apache.org (mxout1-ec2-va.apache.org [3.227.148.255]) by mx-eu-01.ponee.io (Postfix) with ESMTPS id DA89B180181 for ; Fri, 25 Jun 2021 16:00:56 +0200 (CEST) Received: from mail.apache.org (mailroute1-lw-us.apache.org [207.244.88.153]) by mxout1-ec2-va.apache.org (ASF Mail Server at mxout1-ec2-va.apache.org) with SMTP id 1EE4E3F226 for ; Fri, 25 Jun 2021 14:00:56 +0000 (UTC) Received: (qmail 32630 invoked by uid 500); 25 Jun 2021 14:00:55 -0000 Mailing-List: contact api-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list api@directory.apache.org Received: (qmail 32618 invoked by uid 99); 25 Jun 2021 14:00:55 -0000 Received: from spamproc1-he-fi.apache.org (HELO spamproc1-he-fi.apache.org) (95.217.134.168) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 25 Jun 2021 14:00:55 +0000 Received: from localhost (localhost [127.0.0.1]) by spamproc1-he-fi.apache.org (ASF Mail Server at spamproc1-he-fi.apache.org) with ESMTP id 50CDAC03D8 for ; Fri, 25 Jun 2021 14:00:54 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamproc1-he-fi.apache.org X-Spam-Flag: NO X-Spam-Score: -0.203 X-Spam-Level: X-Spam-Status: No, score=-0.203 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamproc1-he-fi.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-ec2-va.apache.org ([116.203.227.195]) by localhost (spamproc1-he-fi.apache.org [95.217.134.168]) (amavisd-new, port 10024) with ESMTP id IBHPScBgiIMD for ; Fri, 25 Jun 2021 14:00:53 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.128.47; helo=mail-wm1-f47.google.com; envelope-from=elecharny@gmail.com; receiver= Received: from mail-wm1-f47.google.com (mail-wm1-f47.google.com [209.85.128.47]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 1C614BC4A5 for ; Fri, 25 Jun 2021 14:00:53 +0000 (UTC) Received: by mail-wm1-f47.google.com with SMTP id v20-20020a05600c2154b02901dcefb16af0so5918949wml.5 for ; Fri, 25 Jun 2021 07:00:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=OeufrkgbxmDigf8oVX3NjOKleeeOhemlg81IyTEtMc0=; b=XWNsdMQ+Rg1QeobIyZsY17SPy9kGY5kJNFKZ+60lctXivDYfDZEDmmBlXzPyEGJdre h6jypNS5g4mnMFpMql4ke9ZsOIC/oHKST9j+3nxrzREZtS0IEPCjrJGqTnO4W9QWZCAm mD7n1XqEh/CFhC/ieyMfnuj1i5yAhMVTQZrHMVJ7YvxDS3C14LgHO20AZznmTM8VKXLx bgs3Sv2aNXPTIGNToN/3+Km5+HMsUXx+/OMllleB4+T+X8GbfGCweZa5q4aOvWmQPPFy Kj9NFEaXi4qT7jrjYHP616vClW9j+ER+N8SMIKBu2b139lbL5PK+drwpQDpgaGjPhqjG 4auw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=OeufrkgbxmDigf8oVX3NjOKleeeOhemlg81IyTEtMc0=; b=uQg3oNhy2pUnV6x3xgq7BkTSNOyu1XvHLq8WiDGt2Kf4fvI5zRFamch2eCWXVz/Hkq 2yfWWVWcFiiA44znHlHPn0BZVIkyOVzOBhF/DR1TlpyINBQkng/8xBOzANpUMa6lDZCA onQ/8TiSltDem3F4jLZxaMJQ3Z3IDYca1+62+y8LpD1C2lzoy+D6zF/xWeh+D25BozoW HHRxZETPTWZmFfl0WzAsGvHuY3DlCJZFzEYfjk5+W0hPG26U/pvY5W4gupA/hxCIPgHS jibU1sL2HcYYb7cB40eGH867qeYQlpJjqWLb9AsFvke/f5qNvCZJ8yC8vzHURPKwIGzq 38lw== X-Gm-Message-State: AOAM531JUTBVs1xhuzu7N///cCBv1WU7hH/d0dWviCHcqTkPF2VXN4Va EqjV7FDNcy4bUzlUqR4vZBcfdP7xxTY= X-Google-Smtp-Source: ABdhPJwQSiANAEayQ1DH7i6R05VrAe1dvkjbllqo55587agVqFF634dm3mjgpZY7ON+i9JBmDVdikA== X-Received: by 2002:a1c:541d:: with SMTP id i29mr10886114wmb.41.1624629645863; Fri, 25 Jun 2021 07:00:45 -0700 (PDT) Received: from Emmanuels-MacBook-Pro.local ([109.94.60.70]) by smtp.gmail.com with ESMTPSA id p16sm6277122wrs.52.2021.06.25.07.00.45 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 25 Jun 2021 07:00:45 -0700 (PDT) Subject: Re: Migration to 2.0 API - RBAC Accelerator Extended Operations To: api@directory.apache.org References: <03D5BDD2-7538-4C3E-A38F-7C5D8BA0DD00@apache.org> <6f1f33a1-9511-8464-af49-9022d29d85a8@gmail.com> From: =?UTF-8?Q?Emmanuel_L=c3=a9charny?= Message-ID: Date: Fri, 25 Jun 2021 16:00:44 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Thunderbird/78.11.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit On 25/06/2021 15:51, Shawn McKinney wrote: > > >> On Jun 24, 2021, at 8:43 PM, Emmanuel Lécharny wrote: >> >> On 24/06/2021 20:38, Shawn McKinney wrote: >>> Moving onto the last hurdle for 2.0 migration… >>> To get the accelerator client talking with OpenLDAP RBAC overlay, for extended operations. >>> Emmanuel, as I recall some time ago that the RBAC accelerator client would need to be reworked when we moved to 2.0. >>> Do you recall what the issue was? >> >> The ASN.1 encoding has been rewritten from scratch. The idea was to use a preallocated buffer, which get filled from the end, instead of computing the result size, allocate the buffer and fill it. >> >> It saves the length computation cost most of the time (if the buffer gets too small, we reallocate it) > > OK > >> >>> As it stands, I’m getting server side assertion failure. Before I jump to far into this wanted to check with you. >>> If you want to look at the server side log, it’s here: >>> https://issues.apache.org/jira/browse/FC-238?focusedCommentId=17369035&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-17369035 >> >> The logs aren't helful, there is not enough data in it (typically the received PDU). >> >> Do you have the extended operation code ? > > The client code is locked in a private Gitlab repo but we may be able to convince my employer to donate it or open it up. > > The RBAC overlay (server side) has recently been added to OpenLDAP contrib which will be part of the 2.5 codebase. > > Which brings the question - where does the client belong? Should it be in Fortress core, API, somewhere else? Definitively Fortress. The good thing is that the LDAP API is extensible, so there is no reason to declare extensions in the core code base. -- *Emmanuel Lécharny - CTO* 205 Promenade des Anglais – 06200 NICE T. +33 (0)4 89 97 36 50 P. +33 (0)6 08 33 32 61 emmanuel.lecharny@busit.com https://www.busit.com/ --------------------------------------------------------------------- To unsubscribe, e-mail: api-unsubscribe@directory.apache.org For additional commands, e-mail: api-help@directory.apache.org