FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora Directory

 
 
LinkBack Thread Tools
 
Old 04-07-2011, 11:32 PM
Barry Sitompul
 
Default Can't adjust error log level - 389 DS 1.2.7.5

Hi All,


I'm testing DS upgrade from 1.2.5 to 1.2.7.5 on RHEL 5

I'm getting a lot of new error messages in the 1.2.7.5 error log (default
logging config). These errors do not appear on the 1.2.5 (default logging
config as well) when doing an LDAP search and mod to a user on a certain
tree:

"NSACLPlugin - acllas__client_match_URL: url [ldap:///ou=something,o=the
university of queensland,c=au??sub?(objectclass=*)] scope is subtree but
dn [ou=something,o=the university of queensland,c=au] is not a suffix of
[uid=modadmin,ou=privileged,o=the university of queensland,c=au]"

It's saying that the tree that I am searching is not a suffix of the user
DN I use to bind. It looks more like a warning because the operation
completed successfully, located the user and modified the attributes. Is
this just a new feature that can be turned off?

Is there anything else I can do to disable these error messages? I've
tried to adjust the error log level from the console as per the RedHat
documentation for DS 8.2 but I couldn't find any functions to do so on
config tab->error log. I have also added nsslapd-errorlog-level: 256 to
the dse.ldif but it didn't do anything.

Any help is much appreciated!


Thanks,
Baz



--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
 
Old 04-07-2011, 11:45 PM
Rich Megginson
 
Default Can't adjust error log level - 389 DS 1.2.7.5

On 04/07/2011 05:32 PM, Barry Sitompul wrote:
> Hi All,
>
>
> I'm testing DS upgrade from 1.2.5 to 1.2.7.5 on RHEL 5
>
> I'm getting a lot of new error messages in the 1.2.7.5 error log (default
> logging config). These errors do not appear on the 1.2.5 (default logging
> config as well) when doing an LDAP search and mod to a user on a certain
> tree:
>
> "NSACLPlugin - acllas__client_match_URL: url [ldap:///ou=something,o=the
> university of queensland,c=au??sub?(objectclass=*)] scope is subtree but
> dn [ou=something,o=the university of queensland,c=au] is not a suffix of
> [uid=modadmin,ou=privileged,o=the university of queensland,c=au]"
Can you paste the entire aci and the DN of the entry which has the aci?
> It's saying that the tree that I am searching is not a suffix of the user
> DN I use to bind. It looks more like a warning because the operation
> completed successfully, located the user and modified the attributes. Is
> this just a new feature that can be turned off?
No. It always was an error, but now we log the error so the aci can be
fixed.
> Is there anything else I can do to disable these error messages?
Fix the aci?
> I've
> tried to adjust the error log level from the console as per the RedHat
> documentation for DS 8.2 but I couldn't find any functions to do so on
> config tab->error log. I have also added nsslapd-errorlog-level: 256 to
> the dse.ldif but it didn't do anything.
The error is here:
/* Check the scope */
if ( ludp->lud_scope == LDAP_SCOPE_SUBTREE ) {
if (!slapi_dn_issuffix(n_clientdn, ludp->lud_dn)) {
slapi_log_error( SLAPI_LOG_FATAL, plugin_name,
"acllas__client_match_URL: url [%s] scope
is subtree but dn [%s] "
"is not a suffix of [%s]
",
normed, ludp->lud_dn, n_clientdn );

it is logged as a fatal error - there is no way to turn it off
> Any help is much appreciated!
>
>
> Thanks,
> Baz
>
>
>
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
 

Thread Tools




All times are GMT. The time now is 07:21 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org