On 9/2/21 3:04 PM, Rob Crittenden wrote:
In IPA I'm trying to set the value of nsslapd-sizelimit in cn=config online using our LDAP tool. It is failing with LDAP error 16. What I'm seeing is:ipapython.ipaldap: DEBUG: update_entry modlist [(1, 'nsslapd-sizelimit', [b'2000']), (0, 'nsslapd-sizelimit', [b'100000'])] ldap.NO_SUCH_ATTRIBUTE: {'msgtype': 103, 'msgid': 16, 'result': 16, 'desc': 'No such attribute', 'ctrls': [] Basically I'm trying to delete the original value and adding a new one.
So you are doing two mods? MOD_DELETE and MOD_ADD? Yeah that won't work, needs to be MOD_REPLACE
cn=config does behave differently with attributes in the top cn=config entry. It's been this way for years, so I'm surprised to see an issue being raised about it now. But, basically we stopped filling in the cn=config entry in dse.ldif with all these config attributes and instead made them all "invisible defaults". So if the attribute is not changed after install then trying to delete that attribute will fail.
Mark
It seems like cn=config is being treated differently. rob _______________________________________________ 389-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
-- Directory Server Development Team _______________________________________________ 389-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
