From 8e8fe316fd7310ccb888fe7c11d74f5a071bd61c Mon Sep 17 00:00:00 2001 From: Ludwig Krispenz Date: Tue, 16 Dec 2014 09:46:21 +0100 Subject: [PATCH] Additional fix for ticket 47526 In modrdn we need to distinguish if the entry is changed is a group or a regular memebr of a group. for the group case do the same as when deleting a group For the modrdn of an user entry, the case where no memberof attribute exists has to succeed. Reviewed by ? https://fedorahosted.org/389/ticket/47526 --- ldap/servers/plugins/memberof/memberof.c | 37 +++++++++++++++++++++++++++----- 1 file changed, 32 insertions(+), 5 deletions(-) diff --git a/ldap/servers/plugins/memberof/memberof.c b/ldap/servers/plugins/memberof/memberof.c index 3e0ae7e..e5735da 100644 --- a/ldap/servers/plugins/memberof/memberof.c +++ b/ldap/servers/plugins/memberof/memberof.c @@ -664,6 +664,12 @@ memberof_del_dn_type_callback(Slapi_Entry *e, void *callback_data) slapi_pblock_destroy(mod_pb); + if (rc == LDAP_NO_SUCH_ATTRIBUTE && val[0] == NULL) { + /* if no memberof attribut exists + * handle as success + */ + rc = LDAP_SUCCESS; + } return rc; } @@ -890,16 +896,37 @@ int memberof_postop_modrdn(Slapi_PBlock *pb) if (ret == LDAP_SUCCESS && pre_sdn && post_sdn) { if ((entry_scope && !slapi_sdn_issuffix(post_sdn, entry_scope)) || (entry_scope_exclude_subtree && slapi_sdn_issuffix(post_sdn, entry_scope_exclude_subtree))) { - memberof_del_dn_data del_data = {0, configCopy.memberof_attr}; if((ret = memberof_del_dn_from_groups(pb, &configCopy, pre_sdn))){ slapi_log_error( SLAPI_LOG_FATAL, MEMBEROF_PLUGIN_SUBSYSTEM, "memberof_postop_modrdn - delete dn failed for (%s), error (%d)\n", slapi_sdn_get_dn(pre_sdn), ret); } - if(ret == LDAP_SUCCESS && (ret = memberof_del_dn_type_callback(post_e, &del_data))){ - slapi_log_error( SLAPI_LOG_FATAL, MEMBEROF_PLUGIN_SUBSYSTEM, - "memberof_postop_modrdn - delete dn callback failed for (%s), error (%d)\n", - slapi_entry_get_dn(post_e), ret); + /* is the entry of interest as a group? */ + if(pre_e && configCopy.group_filter && !slapi_filter_test_simple(pre_e, configCopy.group_filter)) + { + int i = 0; + Slapi_Attr *attr = 0; + + /* Loop through to find each grouping attribute separately. */ + for (i = 0; configCopy.groupattrs[i] && ret == LDAP_SUCCESS; i++) + { + if (0 == slapi_entry_attr_find(pre_e, configCopy.groupattrs[i], &attr)) + { + if((ret = memberof_del_attr_list(pb, &configCopy, pre_sdn, attr))){ + slapi_log_error( SLAPI_LOG_FATAL, MEMBEROF_PLUGIN_SUBSYSTEM, + "memberof_postop_modrdn: error deleting attr list - dn (%s). Error (%d)\n", + slapi_sdn_get_dn(pre_sdn),ret); + } + + } + } + } else { + memberof_del_dn_data del_data = {0, configCopy.memberof_attr}; + if(ret == LDAP_SUCCESS && (ret = memberof_del_dn_type_callback(post_e, &del_data))){ + slapi_log_error( SLAPI_LOG_FATAL, MEMBEROF_PLUGIN_SUBSYSTEM, + "memberof_postop_modrdn - delete dn callback failed for (%s), error (%d)\n", + slapi_entry_get_dn(post_e), ret); + } } } else { if((ret = memberof_replace_dn_from_groups(pb, &configCopy, pre_sdn, post_sdn))){ -- 1.7.11.7