389-ds-base

#50054 Ticket 50053 - Subtree password policy overrides a user-defined password policy
Closed by spichugi. Opened by tbordaz.
tbordaz/389-ds-base ticket_50053  into  master

Download 50054.patch

Bug Description:
When an entry contains an attribute that is also defined by a cos definition
a specifier defines which values win: the real values that are in the entry or the
virtual values that are cos defined.
The specifier 'default' means that the real values are the winners (returned).
'operational-default' has the same behavior but just specify that the attribute
is operational.
The bug is that when real values exists, the 'operational-default' specifier
drops the real values in favor of the virtual ones.

Fix Description:
Change the test, so that real values are not kept for 'operation-default'
Note: the full routine cos_cache_query_attr looks quite messy and error prone
It would be nice to rewrite it when we have time

https://pagure.io/389-ds-base/issue/50053

Reviewed by: ?

Platforms tested: F27

Flag Day: no

Doc impact: no

Can you add a change to the test to make sure COS still works for the virtual attribute values when they are not present in the entry? Looks like this test just makes sure that present/existing values are still returned, but i want to make sure there are no regressions. Thanks!

rebased onto cde992ba2787d05147e1b07a0579110a88631bf9

@mreynolds I improved the test coverage.. and of course hit another issue ;)
I commented out the test that was failing. I am still unsure if it is a bug or test issue but I reading code/doc I tend to think it is a bug.

I would prefer to keep this ticket to the original customer issue (operational-default) and open a different one (merge-schemes) if necessary

That works, you have my ack

rebased onto 5d7b95cc0aa0f1d7498825c6f9bc0210c80fd3e1

Pull-Request has been merged by tbordaz

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This pull request has been cloned to Github as issue and is available here:
- https://github.com/389ds/389-ds-base/issues/3113

If you want to continue to work on the PR, please navigate to the github issue,
download the patch from the attachments and file a new pull request.

Thank you for understanding. We apologize for all inconvenience.

Pull-Request has been closed by spichugi
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.