Bug 1132094

Summary: slapd.ldif olcFrontend missing important/required objectclass
Product: Red Hat Enterprise Linux 7 Reporter: Louis Abel <tucklesepk>
Component: openldapAssignee: Jan Synacek <jsynacek>
Status: CLOSED ERRATA QA Contact: Eduard Benes <ebenes>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 7.0CC: arubin, ebenes, jsynacek, mnavrati, pkis, sebastian.leitz
Target Milestone: rcKeywords: Patch
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: openldap-2.4.39-6.el7 Doc Type: Bug Fix
Doc Text:
Due to a missing object-path information in the database front-end configuration, it was not possible to modify the front-end configuration by standard means. The objectClass information has been added, and the user now can modify the front-end configuration by standard means.
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-03-05 13:35:37 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Louis Abel 2014-08-20 16:18:11 UTC
Description of problem:

Current /usr/share/openldap-servers/slapd.ldif that mentions in the Frontend database is missing an important objectClass. This causes issues when trying to add specific attributes that would be done on the frontend olc database just as olcPasswordHash.

It currently reads:
...
dn: olcDatabase=frontend,cn=config
objectClass: olcDatabaseConfig
olcDatabase: frontend
...

It should be:

dn: olcDatabase=frontend,cn=config
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: frontend


Version-Release number of selected component (if applicable):
openldap-servers-2.4.39-3.el7.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Install openldap-servers
2. Attempt to modify olcDatabase={-1}Frontend adding olcPasswordHash or other applicable attributes


Actual results:
modifying entry "olcDatabase={-1}frontend,cn=config"
ldap_modify: Object class violation (65)
        additional info: attribute 'olcPasswordHash' not allowed

Expected results:
modifying entry "olcDatabase={-1}frontend,cn=config"
(No errors)

Additional info:
N/A

Comment 2 Jan Synacek 2014-09-08 11:39:51 UTC
Submitted as Upstream ITS #7933.

http://www.openldap.org/its/index.cgi/Incoming?id=7933;selectid=7933

Comment 3 Sebastian 2014-09-30 08:17:34 UTC
As Upstream has already fixed this (new issue link: http://www.openldap.org/its/index.cgi/Build?id=7933), when can one expect the fix to arrive in RHEL 7?

Comment 6 Jan Synacek 2014-11-28 11:47:54 UTC
*** Bug 1132111 has been marked as a duplicate of this bug. ***

Comment 13 errata-xmlrpc 2015-03-05 13:35:37 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-0597.html