- **status**: review --> fixed
- **Comment**:

changeset:   6152:e4ac03ade316
branch:      opensaf-4.5.x
tag:         tip
user:        Anders Bjornerstedt <[email protected]>
date:        Wed Nov 19 11:28:53 2014 +0100
summary:     IMM: Protect non long DN capable clients in delete callback [#1204]

changeset:   6151:89d5832ec8b2
branch:      opensaf-4.5.x
user:        Anders Bjornerstedt <[email protected]>
date:        Wed Nov 19 11:15:38 2014 +0100
summary:     IMM: Protect non long DN capable clients in modify callback [#1204]

changeset:   6150:3c41da14c7f3
branch:      opensaf-4.5.x
parent:      6143:d9d844038a49
user:        Anders Bjornerstedt <[email protected]>
date:        Wed Nov 19 11:04:47 2014 +0100
summary:     IMM: Detect long DN/parentDN, long RDN, long SaNameT attr for 
create callback [#1204]

changeset:   6149:138b600b08e1
user:        Anders Bjornerstedt <[email protected]>
date:        Wed Nov 19 11:28:53 2014 +0100
summary:     IMM: Protect non long DN capable clients in delete callback [#1204]

changeset:   6148:511b19e965c8
user:        Anders Bjornerstedt <[email protected]>
date:        Wed Nov 19 11:15:38 2014 +0100
summary:     IMM: Protect non long DN capable clients in modify callback [#1204]

changeset:   6147:b2ee77bea17a
user:        Anders Bjornerstedt <[email protected]>
date:        Wed Nov 19 11:04:47 2014 +0100
summary:     IMM: Detect long DN/parentDN, long RDN, long SaNameT attr for 
create callback [#1204]




---

** [tickets:#1204] IMM: Short parent DN + RDN can result in long DN in create 
callback**

**Status:** fixed
**Milestone:** 4.5.1
**Created:** Thu Nov 06, 2014 03:15 PM UTC by Anders Bjornerstedt
**Last Updated:** Sun Nov 16, 2014 07:44 PM UTC
**Owner:** Anders Bjornerstedt

One case of protecting OI clients that can not handle long DNs, from getting
callbacks that include or imply long DNs has been forgotten in 4.5.

This is the case of a ccb-create callback where the parent DN is shorter than
256 bytes, but when the RDN attribute is added the resulting new object DN
becomes longer than 256 bytes (including null termination).

Note that the case where the parent DN itself is long and the client is
incapable is handled in the current 4.5 library code for ccbCreate callback.

This is complicated by the fact that the generic client library code does not
know which attribute is the RDN attribute. 

The suggested solution is that the immnd server in the message to the client 
always include a flag indicating if a create callback implies a long DN.

The generic client library code can then just check this flag and compare with
the clients setting for longDN capability or not. If the client is incapable
of handling long DNs, the callback bounces back to the server with error
without involving the application level OI, in the same way as a modify/delete
callback should do if the DN is long and client is incapable.

The object-create-callback in the new SaStringT based API avoids this awkward
special problem with the old create callback. In the new API the create callback
simply contains the DN of the object proposed for creation, symetric with modify
and delete callbacks. This relieves the OI from having to deal with the messy
RDN concept. 



---

Sent from sourceforge.net because [email protected] is 
subscribed to https://sourceforge.net/p/opensaf/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://sourceforge.net/p/opensaf/admin/tickets/options.  Or, if this is a 
mailing list, you can unsubscribe from the mailing list.
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
_______________________________________________
Opensaf-tickets mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets

Reply via email to