You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by Javier Méndez Vásquez <lu...@gmail.com> on 2012/05/03 23:56:17 UTC

[ApacheDS] What is AciAuthorizationInterceptor for?

Hi all,



I’m using Apache DS 1.5.5.



I have deployed an embedded version of ApacheDS in my application. I can
start my embedded ApacheDS correctly with a custom partition, but in some
cases it will fail with:



->Searching for DN
0.9.2342.19200300.100.1.25=some,0.9.2342.19200300.100.1.25=dn,0.9.2342.19200300.100.1.25=net
with filter
(|:[9223372036854775807](objectClass=groupOfNames:[9223372036854775807])(objectClass=groupOfUniqueNames:[9223372036854775807]))
2012-05-03T17:06:02Z ERROR: Exception starting Directory Services server

->javax.naming.directory.InvalidSearchFilterException: Unbalanced
parenthesis; remaining name
'0.9.2342.19200300.100.1.25=some,0.9.2342.19200300.100.1.25=dn,0.9.2342.19200300.100.1.25=net'

 I have no idea why, but the error occurs depending on my partition
configuration.



So, I decided to remove AciAuthorizationInterceptor from the default
interceptor list (that’s the one submitting a search with the offending
filter while initializing), as I don’t really need any authorization going
on inside of ApacheDS.



However, I want to make sure I’m not messing up with other functionality by
doing this. Any advices or comments are welcome.



Thanks!


Javier Mendez

Re: [ApacheDS] What is AciAuthorizationInterceptor for?

Posted by Kiran Ayyagari <ka...@apache.org>.
shouldn't have any side effects after disabling

On Fri, May 4, 2012 at 3:26 AM, Javier Méndez Vásquez
<lu...@gmail.com> wrote:
> Hi all,
>
>
>
> I’m using Apache DS 1.5.5.
>
>
>
> I have deployed an embedded version of ApacheDS in my application. I can
> start my embedded ApacheDS correctly with a custom partition, but in some
> cases it will fail with:
>
>
>
> ->Searching for DN
> 0.9.2342.19200300.100.1.25=some,0.9.2342.19200300.100.1.25=dn,0.9.2342.19200300.100.1.25=net
> with filter
> (|:[9223372036854775807](objectClass=groupOfNames:[9223372036854775807])(objectClass=groupOfUniqueNames:[9223372036854775807]))
> 2012-05-03T17:06:02Z ERROR: Exception starting Directory Services server
>
> ->javax.naming.directory.InvalidSearchFilterException: Unbalanced
> parenthesis; remaining name
> '0.9.2342.19200300.100.1.25=some,0.9.2342.19200300.100.1.25=dn,0.9.2342.19200300.100.1.25=net'
>
>  I have no idea why, but the error occurs depending on my partition
> configuration.
>
>
>
> So, I decided to remove AciAuthorizationInterceptor from the default
> interceptor list (that’s the one submitting a search with the offending
> filter while initializing), as I don’t really need any authorization going
> on inside of ApacheDS.
>
>
>
> However, I want to make sure I’m not messing up with other functionality by
> doing this. Any advices or comments are welcome.
>
>
>
> Thanks!
>
>
> Javier Mendez



-- 
Kiran Ayyagari

Re: [ApacheDS] What is AciAuthorizationInterceptor for?

Posted by Javier Méndez Vásquez <lu...@gmail.com>.
Thanks for your suggestion Emmanuel. I did wanted to do so, however at the
moment I embedded ApacheDS in my application I didn't knew how to write a
custom partition on 1.5.7 (I haven't checked latest documentation yet).

Thanks Kiran.

2012/5/3 Javier Méndez Vásquez <lu...@gmail.com>

> Hi all,
>
>
>
> I’m using Apache DS 1.5.5.
>
>
>
> I have deployed an embedded version of ApacheDS in my application. I can
> start my embedded ApacheDS correctly with a custom partition, but in some
> cases it will fail with:
>
>
>
> ->Searching for DN
> 0.9.2342.19200300.100.1.25=some,0.9.2342.19200300.100.1.25=dn,0.9.2342.19200300.100.1.25=net
> with filter
> (|:[9223372036854775807](objectClass=groupOfNames:[9223372036854775807])(objectClass=groupOfUniqueNames:[9223372036854775807]))
> 2012-05-03T17:06:02Z ERROR: Exception starting Directory Services server
>
> ->javax.naming.directory.InvalidSearchFilterException: Unbalanced
> parenthesis; remaining name
> '0.9.2342.19200300.100.1.25=some,0.9.2342.19200300.100.1.25=dn,0.9.2342.19200300.100.1.25=net'
>
>  I have no idea why, but the error occurs depending on my partition
> configuration.
>
>
>
> So, I decided to remove AciAuthorizationInterceptor from the default
> interceptor list (that’s the one submitting a search with the offending
> filter while initializing), as I don’t really need any authorization going
> on inside of ApacheDS.
>
>
>
> However, I want to make sure I’m not messing up with other functionality
> by doing this. Any advices or comments are welcome.
>
>
>
> Thanks!
>
>
> Javier Mendez
>

Re: [ApacheDS] What is AciAuthorizationInterceptor for?

Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 5/3/12 11:56 PM, Javier Méndez Vásquez a écrit :
> Hi all,
>
>
>
> I’m using Apache DS 1.5.5.

You should *really* switch to a more recent version !

At least 1.5.7, but probably to a 2.0.0 milestone (like 2.0.0-M6).

1.5.5. is 3 years old now...
>
>
>
> I have deployed an embedded version of ApacheDS in my application. I can
> start my embedded ApacheDS correctly with a custom partition, but in some
> cases it will fail with:
>
>
>
> ->Searching for DN
> 0.9.2342.19200300.100.1.25=some,0.9.2342.19200300.100.1.25=dn,0.9.2342.19200300.100.1.25=net
> with filter
> (|:[9223372036854775807](objectClass=groupOfNames:[9223372036854775807])(objectClass=groupOfUniqueNames:[9223372036854775807]))
> 2012-05-03T17:06:02Z ERROR: Exception starting Directory Services server
>
> ->javax.naming.directory.InvalidSearchFilterException: Unbalanced
> parenthesis; remaining name
> '0.9.2342.19200300.100.1.25=some,0.9.2342.19200300.100.1.25=dn,0.9.2342.19200300.100.1.25=net'
>
>   I have no idea why, but the error occurs depending on my partition
> configuration.
>
>
>
> So, I decided to remove AciAuthorizationInterceptor from the default
> interceptor list (that’s the one submitting a search with the offending
> filter while initializing), as I don’t really need any authorization going
> on inside of ApacheDS.
>
>
>
> However, I want to make sure I’m not messing up with other functionality by
> doing this. Any advices or comments are welcome.
>
>
>
> Thanks!
>
>
> Javier Mendez
>


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com