You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Leif Johansson (JIRA)" <ji...@apache.org> on 2007/03/31 23:38:25 UTC
[jira] Created: (DIRSTUDIO-74) empty DN does not work
empty DN does not work
----------------------
Key: DIRSTUDIO-74
URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
Project: Directory LDAP Studio
Issue Type: Bug
Affects Versions: 0.6.0
Environment: eclipse 3.2 with
Reporter: Leif Johansson
The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Leif Johansson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485965 ]
Leif Johansson commented on DIRSTUDIO-74:
-----------------------------------------
You are missing the point. Its not a question of having an entry with two DNs. I am claiming that you have confused two uses of a DN: a naming context and an entry dn.
The bottom line is that you must be able to support the empty naming context or you won't be able to host dc=org and dc=com in the same naming context. The fact that both eDirectory and OpenLDAP support this should make you think twice before making claims that this feature somehow breaks the spec :-)
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Components: ldapstudio-browser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assigned To: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Leif Johansson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485917 ]
Leif Johansson commented on DIRSTUDIO-74:
-----------------------------------------
I am using OpenLDAP and Stefans comment above clearly shows that there is a difference between the name of the RootDSE (which is a subentry) and the root naming context. In other words just because the root DSE and the root naming context have the same string representation doesn't mean they are the same :-)
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Components: ldapstudio-browser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assigned To: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (DIRSTUDIO-74) empty DN does not work
Posted by "Stefan Seelmann (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Stefan Seelmann resolved DIRSTUDIO-74.
--------------------------------------
Resolution: Fixed
Most items are fixed. The empty DN in namingContext is now handled and could be used as search base. The browser view has been restructured, the RootDSE is now always visible and the root of the DIT.
Some issues aren't fixed:
- The LDIF editor isn't able to handle the empty DN. This will be resolved with DIRSTUDIO-43.
- It isn't possible to create an entry with the empty DN using the New Entry wizard. And it isn't possible to rename or move the entry with the empty DN using the rename or move dialogs. I think such operations are not necessary, otherwise we have to redesign some GUI widgets.
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Components: ldapstudio-browser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assigned To: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485963 ]
Emmanuel Lecharny commented on DIRSTUDIO-74:
--------------------------------------------
I just wanted to add somethiong moe interesting, and related to the issue :
1) This is not because ADS does not accept empty DN except for rootDSE that LdapStudio should not provide such a DN : there are other Ldap server out there ;)
2) A search operation with an empty DN should always be accepted, an sent to the server
3) A modify operation applied on a empty DN should be sent to the server, this is the server responsaibilty to accept it or not
4) A delete operation should be sent to the server, with the same behavior
5) a create operation should be sent to the server, with the same behavior.
In other words, from the LdapStudio point of view, empty DN *musr* be seen as legitimate.
Any discussion about the legitimity of an empty DN would deserve another thread on dev@directory.apache.org.
(and I must admit that I started the discussion, so my bad :)
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Components: ldapstudio-browser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assigned To: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (DIRSTUDIO-74) empty DN does not work
Posted by "Pierre-Arnaud Marcelot (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Pierre-Arnaud Marcelot closed DIRSTUDIO-74.
-------------------------------------------
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory Studio
> Issue Type: Bug
> Components: studio-ldapbrowser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assignee: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Leif Johansson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485966 ]
Leif Johansson commented on DIRSTUDIO-74:
-----------------------------------------
Note that I replied to the last but one post :-) I agree with the last post you made.
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Components: ldapstudio-browser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assigned To: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485886 ]
Emmanuel Lecharny commented on DIRSTUDIO-74:
--------------------------------------------
More infos :
>From RFC 2251, chapter 3.2 :
"The largest collection of entries, starting at an entry that is
mastered by a particular server, and including all its subordinates
and their subordinates, down to the entries which are mastered by
different servers, is termed a naming context. *The root of the DIT
is a DSA-specific Entry (DSE) and not part of any naming context:
each server has different attribute values in the root DSE*. "
>From RFC 4512, chapter 5.1 :
"An LDAP server SHALL provide information about itself and other
information that is specific to each server. This is represented as
a group of attributes located in *the root DSE, which is named with
the DN with zero RDNs (whose [RFC 4514] representation is as the
zero-length string).*"
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485752 ]
Emmanuel Lecharny commented on DIRSTUDIO-74:
--------------------------------------------
That's right : when you set the "search Base" to the empty string, the "Search" button is not active. It should be, if the scope is Object and if the filter is (ObjectClass=*).
How do you get the other error?
Last point : you must select an entry to be able to do a search. It would be better if we can launch a search from the menu even if no partition is selected.
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Leif Johansson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485881 ]
Leif Johansson commented on DIRSTUDIO-74:
-----------------------------------------
This is not in the context of making a search but when creating a directory server configuration - my directory server is based on the empty DN!
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Stefan Seelmann (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485885 ]
Stefan Seelmann commented on DIRSTUDIO-74:
------------------------------------------
Leif, which directory server are you using?
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485949 ]
Emmanuel Lecharny commented on DIRSTUDIO-74:
--------------------------------------------
http://tools.ietf.org/html/rfc3672 :
"From [X.501]:
A subentry is a special kind of entry immediately subordinate to
an administrative point. It contains attributes that pertain to
a subtree (or subtree refinement) associated with its
administrative point. The subentries and their administrative
point are part of the same naming context.
A single subentry may serve all or several aspects of
administrative authority. Alternatively, a specific aspect of
administrative authority may be handled through one or more of
its own subentries."
Here is a description about subentries in ADS : http://directory.apache.org/apacheds/1.0/the-administrative-model.html
Basically, no way to get a DN pointing to 2 entries. At least in ADS, and I don't see how it can be possible in any other ldap server (or I would be surprised).
Again, the fact that other ldap server define a DIT with an empty DN is breaking LDAP specs. I think they allow this as a workaround to a problem with Exchange servs which kind of allow this. But you will have to find me the place in the RFC where this is explicitely allowed, when I exposed the place where it is said that it's the rootDSE DN ...
Of course, I can be plain wrong, and in this case, we will have to reconsider a lot of things in ADS, but that's another story :)
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Components: ldapstudio-browser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assigned To: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Leif Johansson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485926 ]
Leif Johansson commented on DIRSTUDIO-74:
-----------------------------------------
Yes you can - thats what you have subentries for. Granted they were never defined for LDAP but in the case of the root dse and naming contexts (which both are subentries in X.500) they sort-of exist.
This is getting away from the basic point: empty DNs are valid and don't just implicitly refer to the root dse. All directory servers I've come across support them as do most if not all directory clients (including all administrative clients) with the exception of ldap studio.
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Components: ldapstudio-browser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assigned To: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485924 ]
Emmanuel Lecharny commented on DIRSTUDIO-74:
--------------------------------------------
They are the same, definitively. You cant' have a DN pointing on two different DIT, that's simply impossible in LDAP.
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Components: ldapstudio-browser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assigned To: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSTUDIO-74) empty DN does not work
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12485884 ]
Emmanuel Lecharny commented on DIRSTUDIO-74:
--------------------------------------------
Creating a directory server using an empty DN as a root is not allowed, simply because it's already existing : it's the RootDSE, which is not really a DIT.
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DIRSTUDIO-74) empty DN does not work
Posted by "Stefan Seelmann (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSTUDIO-74?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Stefan Seelmann updated DIRSTUDIO-74:
-------------------------------------
Component/s: ldapstudio-browser
Fix Version/s: 0.8.0
Assignee: Stefan Seelmann
Some more information from RFC 4512:
5.1.2. 'namingContexts'
The 'namingContexts' attribute lists the context prefixes of the
naming contexts the server masters or shadows (in part or in whole).
If the server is a first-level DSA [X.501], it should list (in
addition) an empty string (indicating the root of the DIT). If the
server does not master or shadow any information (e.g., it is an LDAP
gateway to a public X.500 directory) this attribute will be absent.
If the server believes it masters or shadows the entire directory,
the attribute will have a single value, and that value will be the
empty string (indicating the root of the DIT).
I checked it with Novell's eDirectory, it returns an empty DN in the namingContexts attribute of the rootDSE. LS doesn't handle that case atm. Additionally LS should accept the empty DN as connection's base DN and as search base.
> empty DN does not work
> ----------------------
>
> Key: DIRSTUDIO-74
> URL: https://issues.apache.org/jira/browse/DIRSTUDIO-74
> Project: Directory LDAP Studio
> Issue Type: Bug
> Components: ldapstudio-browser
> Affects Versions: 0.6.0
> Environment: eclipse 3.2 with
> Reporter: Leif Johansson
> Assigned To: Stefan Seelmann
> Fix For: 0.8.0
>
>
> The empty DN is a perfectly valid DN for a directory server. When getting the DN from the root DSE ldap studio displays an error if the root dn is empty. Also the empty dn can't be set manually.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.