FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora Directory

 
 
LinkBack Thread Tools
 
Old 03-14-2011, 06:17 PM
Luca Menegus
 
Default Server Side Sort, Virtual List View and Aci

Hi,
when searching ds using ServerSideSearch control and VirtualListView control it does not seem to take into account the configured ACIs when returning the contentCount field of the VirtualListView response control.
The contentCount field of the VLV response control it will be set to the total number of entries matching the search and not to the number of entries matching the search AND searcheable by the user performing the search.

Example:
- there are 10 people in the directory, 5 in peopleA ou and 5 in people B ou
- userA can search (and read) the anything under peopleA
- userB can search (and read) the anything under peopleB
- SuperUser can search (and read) the anything

If I bind and search as SuperUser everything works as expected (contentCount is 10) and I can "scroll" through the rs as expected.
If I bind and search as UserA contentCount is still 10 and the resultset contains "holes". For instance if sort the search so that entries under peopleB come first then requesting (using VLV control fiels) 5 entries from entry #1 returns an empty rs, while requesting 5 entries from entry #5 returns the expected 5 entry under peopleA.

The behavior when searching as userB is consistent (the other 5 entries are returned).

I'm using 389-ds-base-1.2.7.5-1.fc14.x86_64 under fc14-x86_64.

I'm I doing something wrong, or is this the expected behavior?


Luca
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
 
Old 03-15-2011, 08:55 AM
Andrey Ivanov
 
Default Server Side Sort, Virtual List View and Aci

Hi Luca,

I have the same problem - i have two OUs and an ACI that "hides" one
of these OUs to anonymous users. When i implement a VLV index level
higher than these two OUs and use Outlook to browse the directory
everything is rather scrambled because if the VLV indexes. So the
problem really is the joint use of ACIs "hiding" some of the entries
and VLV indexes. Don't know whether it can be considered as a bug or
as a feature request but this is what we need desperately before
deploying it large scale (primarily Outlook clients using this VLV)...

@+

2011/3/14 Luca Menegus <lucam@dbmsrl.com>:
> Hi,
> *when searching ds using ServerSideSearch control and VirtualListView control it does not seem to take into account the configured ACIs when returning the contentCount field of the VirtualListView response control.
> The contentCount field of the VLV response control it will be set to the total number of entries matching the search and not to the number of entries matching the search AND searcheable by the user performing the search.
>
> Example:
> - there are 10 people in the directory, 5 in peopleA ou and 5 in people B ou
> - userA can search (and read) the anything under peopleA
> - userB can search (and read) the anything under peopleB
> - SuperUser can search (and read) the anything
>
> If I bind and search as SuperUser everything works as expected (contentCount is 10) and I can "scroll" through the rs as expected.
> If I bind and search as UserA contentCount is still 10 and the resultset contains "holes". For instance if sort the search so that entries under peopleB come first then requesting (using VLV control fiels) 5 entries from entry #1 returns an empty rs, while requesting 5 entries from entry #5 returns the expected 5 entry under peopleA.
>
> The behavior when searching as userB is consistent (the other 5 entries are returned).
>
> I'm using 389-ds-base-1.2.7.5-1.fc14.x86_64 under fc14-x86_64.
>
> I'm I doing something wrong, or is this the expected behavior?
>
>
> Luca
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
 
Old 03-15-2011, 03:35 PM
Noriko Hosoi
 
Default Server Side Sort, Virtual List View and Aci

Hi Luca, Hi Andrey,

Could you open a bug on the bugzilla under 389? We'd like to
investigate it.

Thanks,
--noriko

Andrey Ivanov wrote:
> Hi Luca,
>
> I have the same problem - i have two OUs and an ACI that "hides" one
> of these OUs to anonymous users. When i implement a VLV index level
> higher than these two OUs and use Outlook to browse the directory
> everything is rather scrambled because if the VLV indexes. So the
> problem really is the joint use of ACIs "hiding" some of the entries
> and VLV indexes. Don't know whether it can be considered as a bug or
> as a feature request but this is what we need desperately before
> deploying it large scale (primarily Outlook clients using this VLV)...
>
> @+
>
> 2011/3/14 Luca Menegus<lucam@dbmsrl.com>:
>> Hi,
>> when searching ds using ServerSideSearch control and VirtualListView control it does not seem to take into account the configured ACIs when returning the contentCount field of the VirtualListView response control.
>> The contentCount field of the VLV response control it will be set to the total number of entries matching the search and not to the number of entries matching the search AND searcheable by the user performing the search.
>>
>> Example:
>> - there are 10 people in the directory, 5 in peopleA ou and 5 in people B ou
>> - userA can search (and read) the anything under peopleA
>> - userB can search (and read) the anything under peopleB
>> - SuperUser can search (and read) the anything
>>
>> If I bind and search as SuperUser everything works as expected (contentCount is 10) and I can "scroll" through the rs as expected.
>> If I bind and search as UserA contentCount is still 10 and the resultset contains "holes". For instance if sort the search so that entries under peopleB come first then requesting (using VLV control fiels) 5 entries from entry #1 returns an empty rs, while requesting 5 entries from entry #5 returns the expected 5 entry under peopleA.
>>
>> The behavior when searching as userB is consistent (the other 5 entries are returned).
>>
>> I'm using 389-ds-base-1.2.7.5-1.fc14.x86_64 under fc14-x86_64.
>>
>> I'm I doing something wrong, or is this the expected behavior?
>>
>>
>> Luca
>> --
>> 389 users mailing list
>> 389-users@lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
>>
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
 
Old 03-16-2011, 11:36 AM
Luca Menegus
 
Default Server Side Sort, Virtual List View and Aci

Hi Noriko,
tonight or tomorrow I'll have the time to prepare the bug report along with a test case

Luca

Luca Menegus

D.B.M. S.r.l
Via Enrico Noe, 23 - 20133 Milano (MI) Italy.
Phone: +39 02 45473052
Mobile: +39 3346220663

----- Original Message -----
> From: "Noriko Hosoi" <nhosoi@redhat.com>
> To: 389-users@lists.fedoraproject.org
> Sent: Tuesday, March 15, 2011 5:35:19 PM
> Subject: Re: [389-users] Server Side Sort, Virtual List View and Aci
> Hi Luca, Hi Andrey,
>
> Could you open a bug on the bugzilla under 389? We'd like to
> investigate it.
>
> Thanks,
> --noriko
>
> Andrey Ivanov wrote:
> > Hi Luca,
> >
> > I have the same problem - i have two OUs and an ACI that "hides" one
> > of these OUs to anonymous users. When i implement a VLV index level
> > higher than these two OUs and use Outlook to browse the directory
> > everything is rather scrambled because if the VLV indexes. So the
> > problem really is the joint use of ACIs "hiding" some of the entries
> > and VLV indexes. Don't know whether it can be considered as a bug or
> > as a feature request but this is what we need desperately before
> > deploying it large scale (primarily Outlook clients using this
> > VLV)...
> >
> > @+
> >
> > 2011/3/14 Luca Menegus<lucam@dbmsrl.com>:
> >> Hi,
> >> when searching ds using ServerSideSearch control and
> >> VirtualListView control it does not seem to take into account the
> >> configured ACIs when returning the contentCount field of the
> >> VirtualListView response control.
> >> The contentCount field of the VLV response control it will be set
> >> to the total number of entries matching the search and not to the
> >> number of entries matching the search AND searcheable by the user
> >> performing the search.
> >>
> >> Example:
> >> - there are 10 people in the directory, 5 in peopleA ou and 5 in
> >> people B ou
> >> - userA can search (and read) the anything under peopleA
> >> - userB can search (and read) the anything under peopleB
> >> - SuperUser can search (and read) the anything
> >>
> >> If I bind and search as SuperUser everything works as expected
> >> (contentCount is 10) and I can "scroll" through the rs as expected.
> >> If I bind and search as UserA contentCount is still 10 and the
> >> resultset contains "holes". For instance if sort the search so that
> >> entries under peopleB come first then requesting (using VLV control
> >> fiels) 5 entries from entry #1 returns an empty rs, while
> >> requesting 5 entries from entry #5 returns the expected 5 entry
> >> under peopleA.
> >>
> >> The behavior when searching as userB is consistent (the other 5
> >> entries are returned).
> >>
> >> I'm using 389-ds-base-1.2.7.5-1.fc14.x86_64 under fc14-x86_64.
> >>
> >> I'm I doing something wrong, or is this the expected behavior?
> >>
> >>
> >> Luca
> >> --
> >> 389 users mailing list
> >> 389-users@lists.fedoraproject.org
> >> https://admin.fedoraproject.org/mailman/listinfo/389-users
> >>
> > --
> > 389 users mailing list
> > 389-users@lists.fedoraproject.org
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
 
Old 03-16-2011, 01:39 PM
Andrey Ivanov
 
Default Server Side Sort, Virtual List View and Aci

Hi Luca & Noriko,

I've made a bug report with a test script and an ldif to reproduce it
: https://bugzilla.redhat.com/show_bug.cgi?id=688182 (using th VLV
config adapted for MS Outlook browsing)

If Luca observes some other additional "phenomena" related to this bug
he can complete....
@+

2011/3/16 Luca Menegus <lucam@dbmsrl.com>:
> Hi Noriko,
> *tonight or tomorrow I'll have the time to prepare the bug report along with a test case
>
> Luca
>
> Luca Menegus
>
> D.B.M. S.r.l
> Via Enrico Noe, 23 - 20133 Milano (MI) Italy.
> Phone: +39 02 45473052
> Mobile: +39 3346220663
>
> ----- Original Message -----
>> From: "Noriko Hosoi" <nhosoi@redhat.com>
>> To: 389-users@lists.fedoraproject.org
>> Sent: Tuesday, March 15, 2011 5:35:19 PM
>> Subject: Re: [389-users] Server Side Sort, Virtual List View and Aci
>> Hi Luca, Hi Andrey,
>>
>> Could you open a bug on the bugzilla under 389? We'd like to
>> investigate it.
>>
>> Thanks,
>> --noriko
>>
>> Andrey Ivanov wrote:
>> > Hi Luca,
>> >
>> > I have the same problem - i have two OUs and an ACI that "hides" one
>> > of these OUs to anonymous users. When i implement a VLV index level
>> > higher than these two OUs and use Outlook to browse the directory
>> > everything is rather scrambled because if the VLV indexes. So the
>> > problem really is the joint use of ACIs "hiding" some of the entries
>> > and VLV indexes. Don't know whether it can be considered as a bug or
>> > as a feature request but this is what we need desperately before
>> > deploying it large scale (primarily Outlook clients using this
>> > VLV)...
>> >
>> > @+
>> >
>> > 2011/3/14 Luca Menegus<lucam@dbmsrl.com>:
>> >> Hi,
>> >> * when searching ds using ServerSideSearch control and
>> >> * VirtualListView control it does not seem to take into account the
>> >> * configured ACIs when returning the contentCount field of the
>> >> * VirtualListView response control.
>> >> The contentCount field of the VLV response control it will be set
>> >> to the total number of entries matching the search and not to the
>> >> number of entries matching the search AND searcheable by the user
>> >> performing the search.
>> >>
>> >> Example:
>> >> - there are 10 people in the directory, 5 in peopleA ou and 5 in
>> >> people B ou
>> >> - userA can search (and read) the anything under peopleA
>> >> - userB can search (and read) the anything under peopleB
>> >> - SuperUser can search (and read) the anything
>> >>
>> >> If I bind and search as SuperUser everything works as expected
>> >> (contentCount is 10) and I can "scroll" through the rs as expected.
>> >> If I bind and search as UserA contentCount is still 10 and the
>> >> resultset contains "holes". For instance if sort the search so that
>> >> entries under peopleB come first then requesting (using VLV control
>> >> fiels) 5 entries from entry #1 returns an empty rs, while
>> >> requesting 5 entries from entry #5 returns the expected 5 entry
>> >> under peopleA.
>> >>
>> >> The behavior when searching as userB is consistent (the other 5
>> >> entries are returned).
>> >>
>> >> I'm using 389-ds-base-1.2.7.5-1.fc14.x86_64 under fc14-x86_64.
>> >>
>> >> I'm I doing something wrong, or is this the expected behavior?
>> >>
>> >>
>> >> Luca
>> >> --
>> >> 389 users mailing list
>> >> 389-users@lists.fedoraproject.org
>> >> https://admin.fedoraproject.org/mailman/listinfo/389-users
>> >>
>> > --
>> > 389 users mailing list
>> > 389-users@lists.fedoraproject.org
>> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>>
>> --
>> 389 users mailing list
>> 389-users@lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
 

Thread Tools




All times are GMT. The time now is 04:53 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org