#47665 Create new instance results in setting wrong ACI for the "cn=config" entry
Closed: wontfix None Opened 10 years ago by jyotidas81.

Hi,

If i am logging into the adminserver GUI using cn=directory manager user id and create a new instance from Admin GUI, worng aci is getting added to the "cn=config" etnry.

As per the "12dsconfig.mod.tmpl" file, one of the aci is defined like below
"aci: (targetattr="*")(version 3.0; acl "Configuration Administrator"; allow (all) userdn="ldap:///uid=%as_uid%,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot";)"

In this case, if i create new instance from Adminserver GUI by logging into GUI using "cn=directory manager", uid in the aci's is getting the value as "directory manager"' which is not a valid user in 'o=NetscapeRoot' suffix. The worng aci si look like below.

"aci: (targetattr="*")(version 3.0; acl "Configuration Administrator"; allow (all) userdn="ldap:///uid=directory manager,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot";)"

Regards,
Jyoti


Thanks German for initial investigation and fix!

Pushed to master

bd95221..e9f3fb9 master -> master
commit e9f3fb9b8ba51a4710129d11f4030a53669dc157

Metadata Update from @mreynolds:
- Issue assigned to mreynolds
- Issue set to the milestone: 389-admin,console 1.1.36

7 years ago

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/1002

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix (was: Fixed)

3 years ago

Login to comment on this ticket.

Metadata