Bug 53455 - Add diagnostic check for LDAP schema (slapschema)
Add diagnostic check for LDAP schema (slapschema)
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: UMC - System diagnostic
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-1-errata
Assigned To: Juan Pedro Torres
Arvid Requate
https://git.knut.univention.de/univen...
:
Depends on:
Blocks: 54681
  Show dependency treegraph
 
Reported: 2021-06-16 11:21 CEST by Arvid Requate
Modified: 2022-04-29 16:26 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): bitesize
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2021-06-16 11:21:19 CEST
Recently we had a support case in a project where a trivial udm modify aborted with

LDAP Error: Undefined attribute type: entry update failed

In that case slapschema reported an attribute (characteristic: uppercase) found in the OpenLDAP backend data that was not defined in the LDAP schema. Specifically it was an operational attribute from slapo-lastbind that had been active temporarily for some experiment in that environment.

IIRC the slapschema output was something like this:

54f0829b UNKNOWN attributeDescription “AUTHTIMESTAMP” inserted.


With sufficient slapd debug level the string "UNKNOWN" stuck out in the syslog.
Comment 1 Juan Pedro Torres univentionstaff 2022-03-15 11:46:13 CET
New plugin developed to diagnose if there is missing LDAP schemas refereed by an existing object. Added test file or the plugin.


univention-management-console-module-diagnostic.yaml
fd15f3f115d3 | Bug #53455: update YAML for univention management console module diagnostic
73b09084ea1c | Bug #53455: updated changelog and advisory

univention-management-console-module-diagnostic (6.0.0-26)
73b09084ea1c | Bug #53455: updated changelog and advisory

univention-management-console-module-diagnostic (6.0.0-25)
21cc6090c343 | Bug #53455: Diagnostic tool for missing schemas

ucs-test (10.0.6-101)
95b4c0ec4f50 | Bug #53455: Added test case for the diagnostic tool
Comment 2 Arvid Requate univentionstaff 2022-03-30 14:06:59 CEST
Verified:
* Code review
* Package update
* Functional test
* ucs-test Testcase
* Advisory