Uploaded image for project: 'OpenDJ'
  1. OpenDJ
  2. OPENDJ-862

Strange ds-privilege-name behavior

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 2.6.0
    • Fix Version/s: None
    • Component/s: core server
    • Labels:
    • Environment:
      OpenDJ 2.5.0 Xpress 1 on SLES 11 SP2 with Sun JDK 1.6.0_43

      Description

      Hi

      See these two objects that I have....

      dn: cn=Administrators Privilege-password reset,o=test
      cn: Administrators Privilege-password reset
      description: Decorates the objects matching filter with extra global server rights
      ds-privilege-name;collective: password-reset
      objectClass: extensibleobject
      objectClass: collectiveattributesubentry
      objectClass: subentry
      objectClass: top
      subtreeSpecification:

      { base "", specificationFilter "(isMemberOf=cn=Administrator-password_reset_privilege,ou=rights,o=test)" }

      dn: cn=Administrators Privilege-backup,o=test
      cn: Administrators Privilege-backup
      description: Decorates the objects matching filter with extra global server rights
      ds-privilege-name;collective: ldif-export
      ds-privilege-name;collective: backend-backup
      objectClass: extensibleobject
      objectClass: collectiveattributesubentry
      objectClass: subentry
      objectClass: top
      subtreeSpecification:

      { base "", specificationFilter "(isMemberOf=cn=Administrator-backup_privilege,ou=rights,o=test)" }

      If I am a member of the group cn=Administrator-backup_privilege,ou=rights,o=test I can see the ds-privilege-name attribute on my user with ldif export and backup. Looks GOOD

      If I am a member of the group cn=Administrator-password_reset_privilege,ou=rights,o=test I can see the ds-privilege-name attribute on my user password reset. Looks GOOD

      But if I am a member of both groups I only see the password reset privileges on my user. It's like one overwrites the other.. Looks BAD

      Am I missing something here? Or is it maybe a bug?

      Thanks in advance

      Per-Olov Sjöholm

        Attachments

          Activity

            People

            • Assignee:
              matthew Matthew Swift
              Reporter:
              pos pos [X] (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: