Bug 1360268
Summary: | Duplicate collation entries | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | DaveG <daveg> |
Component: | 389-ds-base | Assignee: | Noriko Hosoi <nhosoi> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 24 | CC: | daveg, edewata, mreynolds, nhosoi, nkinder, rmeggins |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | 389-ds-base-1.3.5.15-1.fc24 389-ds-base-1.3.5.15-1.fc25 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2016-11-06 00:25:51 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
DaveG
2016-07-26 11:38:16 UTC
Upstream ticket: https://fedorahosted.org/389/ticket/48936 Thank you for the report. Could it be possible to share the steps how to reproduce the problem? Also, it'd be helpful if you could share the access and errors log files in /var/log/dirsrv/slapd-INSTANCE. My only experience with 389-ds is through freeipa-server. I have been using gq desktop LDAP client to inspect the LDAP data maintained by freeipa, check service account entries etc. It just crashes now, as noted. That stopped working a while back (months?) so I tried the luma desktop LDAP client. After configuring for anonymous access it shows the duplicate name errors but keeps running. The freeipa instance is still functional and, as far as I can tell, it is not throwing any errors. 389-ds does not appear to be throwing any errors either. The error log just has start, stop, SSL cypher messages, plugins... Nothing interesting. Looks like 389-ds itself is OK but GUI clients that use schema for display are hitting this duplicate entry issue. I doubt many applications use or access the schema tree. So, to reproduce, try the luma desktop client on any recent 389-ds instance, configure an anonymous bind to the server, enable error messages and try browsing the tree. Should show the same errors. I'm fairly sure the problem is in the cited git commit - new sub-languages added separately rather than added to the originals. If you need the error logs, let me know. --DaveG. Thanks for your response, Dave. I'm curious how the collation is being used in your environment. Do you have indexes based upon some language? What does this command line return? # grep nsMatchingRule /etc/dirsrv/slapd-*/dse.ldif Or are you running server side sorting searches? If you could share your access log, it may tell us some idea... Thanks, --noriko First: # grep nsMatchingRule /etc/dirsrv/slapd-*/dse.ldif nsMatchingRule: integerOrderingMatch nsMatchingRule: integerOrderingMatch nsMatchingRule: integerOrderingMatch nsMatchingRule: integerOrderingMatch nsMatchingRule: integerOrderingMatch nsMatchingRule: integerOrderingMatch nsMatchingRule: integerOrderingMatch nsMatchingRule: integerOrderingMatch LDAP instance is "stock" freeipa, external CA, no DNS. No custom indexes. Using desktop GUI LDAP clients to explore data. Tried a "fix" that appears to work for me: Commented out lines 58-60 in /etc/dirsrv/slapd-*/slapd-collations.conf and restarted ipa.service. (Not sure which entries are correct (lines 58-60 or 227-229)) No more errors reported in the luma client. -DaveG P.S. Looks like the gq client is no longer maintained and still crashes. There are other similar BZ reports for it so I'll stop using that. Not sure of the exact syntax but I think this is what was intended: --- /etc/dirsrv/config/slapd-collations.conf 2016-07-01 21:46:48.000000000 +0100 +++ /etc/dirsrv/slapd-EXAMPLE-ORG/slapd-collations.conf 2016-07-29 13:50:49.128677795 +0100 @@ -224,9 +224,9 @@ collation ru RU "" 1 3 2.16.840.1.113730.3.3.2.208.1 ru-RU collation ru UA "" 1 3 2.16.840.1.113730.3.3.2.209.1 ru-UA collation si "" "" 1 3 2.16.840.1.113730.3.3.2.210.1 si si-LK -collation sk "" "" 1 3 2.16.840.1.113730.3.3.2.211.1 sk sk-SK -collation sl "" "" 1 3 2.16.840.1.113730.3.3.2.212.1 sl sl-SI -collation sq "" "" 1 3 2.16.840.1.113730.3.3.2.213.1 sq sq-AL +collation sk SK "" 1 3 2.16.840.1.113730.3.3.2.211.1 sk-SK +collation sl SI "" 1 3 2.16.840.1.113730.3.3.2.212.1 sl-SI +collation sq AL "" 1 3 2.16.840.1.113730.3.3.2.213.1 sq-AL collation sr Cyrl "" 1 3 2.16.840.1.113730.3.3.2.214.1 sr-Cyrl collation sr Cyrl BA 1 3 2.16.840.1.113730.3.3.2.215.1 sr-Cyrl-BA collation sr Cyrl ME 1 3 2.16.840.1.113730.3.3.2.216.1 sr-Cyrl-ME The commit noted above added the base language again, causing the duplication. This works for me. --DaveG. Thank you, Dave. We verified that the lines in slapd-collation.conf you reported caused the regression. It will be fixed in the next 389-ds-base build for F24. Thanks! 389-ds-base-1.3.5.15-1.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-8660c7656f 389-ds-base-1.3.5.15-1.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2016-8f9d466bcc 389-ds-base-1.3.5.15-1.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-8660c7656f 389-ds-base-1.3.5.15-1.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-8f9d466bcc 389-ds-base-1.3.5.15-1.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report. 389-ds-base-1.3.5.15-1.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report. |