Bug 41433 - It is not possible to set global limits via UCR-Variable
It is not possible to set global limits via UCR-Variable
Status: CLOSED DUPLICATE of bug 41647
Product: UCS
Classification: Unclassified
Component: LDAP
UCS 3.2
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
:
Depends on: 40516
Blocks:
  Show dependency treegraph
 
Reported: 2016-06-03 00:11 CEST by Michel Smidt
Modified: 2018-04-14 13:43 CEST (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Forked for project
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michel Smidt 2016-06-03 00:11:48 CEST
+++ This bug was initially created as a clone of Bug #40516 +++

The univention-ldap package was forked for a customer.
Changes:
* Configuration parameter in slapd.conf. Issue #576 & #3153
* Disabled univention-ldap-backup cronjob. Issue #2224
* Configuration parameter in ldap.conf. Issue #3074 & #2771

Goal is to create an API or merge the fork to the product.

This bug handles only the "Configuration parameter in ldap.conf. Issue #2771"
Asked the author for clarification.
Comment 1 Kevin Dominik Korte univentionstaff 2016-06-03 15:29:42 CEST
It should be possible to create Limits in the configuration by setting UCR variables.

for key in configRegistry.get("ldap/limits", "").split(";"):
        if key:
                print "limits %s" % key.replace("'",'"')
print


Additionally, it would be nice if configuring the ACLs would be more flexible. Storing the ACLs might solve the problem.
Comment 2 Michel Smidt 2016-06-14 09:58:13 CEST
Intention of this bug was to set up the possibility to add global limits via UCR. So, it would be very helpful to introduce a UCR-Variable for this kind of purpose.

Please keep in mind that we faced an issue with to long lines (>2048 chars) in the slapd.conf. It's a hard coded limit in the whole slapd.conf.
Following error appeared:
Error:
"Starting ldap server(s): slapd .../etc/ldap/slapd.conf: line 108: no indexes selected
failed."

To fix it it is perfectly fine to just wrap the attributes to a newline. e.g.
index attr1,attr2 eq
index attr3,attr4 eq
Comment 3 Michel Smidt 2016-06-23 10:53:07 CEST

*** This bug has been marked as a duplicate of bug 41647 ***
Comment 4 Stefan Gohmann univentionstaff 2016-09-09 14:04:06 CEST
OK, closed