I am having an issue that may be related to multi-master replication, or it may be related to a non viewable ascii value in an attribute.
We have a custom schema. We have a multivalued attribute departalloweddomain
this attribute has three values inside it. "a.com" "b.com " "c.com "
My goal is to remove the trailing white space. Which may be a space or a weird character.
I have tried deleting the individual values and re-adding them. I attempted to delete the entire attribute and re-add.
The value keeps appearing like so.
"b.com "
Any ideas on how to clean this up. We do thousands of add and remove operations a day and this has happened a few times.
Eddie C wrote:
I am having an issue that may be related to multi-master replication, or it may be related to a non viewable ascii value in an attribute.
We have a custom schema. We have a multivalued attribute departalloweddomain
this attribute has three values inside it. "a.com" "b.com " "c.com "
My goal is to remove the trailing white space. Which may be a space or a weird character.
You can determine what the white space is by saving an .ldif representation [ldapsearch -LLL ... > file]and viewing with a program that views hexcodes like xxd.
I have tried deleting the individual values and re-adding them. I attempted to delete the entire attribute and re-add.
The value keeps appearing like so.
"b.com "
Try editing the .ldif file above and removing the extra characters, modify enough of the attributes so that its unique and add it into the directory using ldapmodify or other standard tool. If this still shows a problem then there is something very unusual about your configuration. If importing the .ldif file is clean I would suspect the technique used to normally add the attributes.
Dan Lannom
hi,
am a directory service newbie and i just got fedora-ds installed on fedora 7. i can search users/objects thru console but web can not do any search.
message is the ff:
------------------------------------------ Forbidden
You don't have permission to access /dsgw/bin/lang on this server.
------------------------------------------
same message for any kind of search thru the web. tried to change permissions for dsgw but nothing changed.
any idea?
TIA.
-ergo-
ergoxsx wrote:
hi,
am a directory service newbie and i just got fedora-ds installed on fedora 7. i can search users/objects thru console but web can not do any search.
message is the ff:
Forbidden
You don't have permission to access /dsgw/bin/lang on this server.
same message for any kind of search thru the web. tried to change permissions for dsgw but nothing changed.
any idea?
Check the access and error logs for the admin server - /opt/fedora-ds/admin-serv/logs
TIA.
-ergo-
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
/opt/fedora-ds/admin-serv/logs shows the following. ldap.abc.com is registered in local dns server and also in /etc/hosts.
[Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.2, referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch
any ideas?
Richard Megginson wrote:
ergoxsx wrote:
hi,
am a directory service newbie and i just got fedora-ds installed on fedora 7. i can search users/objects thru console but web can not do any search.
message is the ff:
Forbidden
You don't have permission to access /dsgw/bin/lang on this server.
same message for any kind of search thru the web. tried to change permissions for dsgw but nothing changed.
any idea?
Check the access and error logs for the admin server - /opt/fedora-ds/admin-serv/logs
TIA.
-ergo-
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
ergoxsx wrote:
/opt/fedora-ds/admin-serv/logs shows the following. ldap.abc.com is registered in local dns server and also in /etc/hosts.
[Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.2, referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch
Can you see the request for dsgw/bin/lang in the access log?
any ideas?
Richard Megginson wrote:
ergoxsx wrote:
hi,
am a directory service newbie and i just got fedora-ds installed on fedora 7. i can search users/objects thru console but web can not do any search.
message is the ff:
Forbidden
You don't have permission to access /dsgw/bin/lang on this server.
same message for any kind of search thru the web. tried to change permissions for dsgw but nothing changed.
any idea?
Check the access and error logs for the admin server - /opt/fedora-ds/admin-serv/logs
TIA.
-ergo-
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
ah, sorry... here it is:
[Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=intro.htm... [Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.htm... [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.htm...
what does this mean? i tried to change permissions but same type of output.
Richard Megginson wrote:
ergoxsx wrote:
/opt/fedora-ds/admin-serv/logs shows the following. ldap.abc.com is registered in local dns server and also in /etc/hosts.
[Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch
Can you see the request for dsgw/bin/lang in the access log?
any ideas?
Richard Megginson wrote:
ergoxsx wrote:
hi,
am a directory service newbie and i just got fedora-ds installed on fedora 7. i can search users/objects thru console but web can not do any search.
message is the ff:
Forbidden
You don't have permission to access /dsgw/bin/lang on this server.
same message for any kind of search thru the web. tried to change permissions for dsgw but nothing changed.
any idea?
Check the access and error logs for the admin server - /opt/fedora-ds/admin-serv/logs
TIA.
-ergo-
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
ergoxsx wrote:
ah, sorry... here it is:
[Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=intro.htm... [Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.htm... [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.htm...
what does this mean?
This message is usually benign.
i tried to change permissions but same type of output.
This looks like the output from the error log. Can you find the corresponding request from the access log?
Richard Megginson wrote:
ergoxsx wrote:
/opt/fedora-ds/admin-serv/logs shows the following. ldap.abc.com is registered in local dns server and also in /etc/hosts.
[Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch
Can you see the request for dsgw/bin/lang in the access log?
any ideas?
Richard Megginson wrote:
ergoxsx wrote:
hi,
am a directory service newbie and i just got fedora-ds installed on fedora 7. i can search users/objects thru console but web can not do any search.
message is the ff:
Forbidden
You don't have permission to access /dsgw/bin/lang on this server.
same message for any kind of search thru the web. tried to change permissions for dsgw but nothing changed.
any idea?
Check the access and error logs for the admin server - /opt/fedora-ds/admin-serv/logs
TIA.
-ergo-
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
I have tried adding/removing these attributes a number of different ways. LDIF/LDAP Browser/ FDS admin console. I fully remove the values and the entire attribute but when I re-add them they keep having extra spaces in the end. I almost believe the entry is corrupted in some way.
I do not want to do anything very drastic because only this one entry is showing problems (that I know of)
On 9/24/07, Dan Lannom dlannom@umd.umich.edu wrote:
Eddie C wrote:
I am having an issue that may be related to multi-master replication, or it may be related to a non viewable ascii value in an attribute.
We have a custom schema. We have a multivalued attribute departalloweddomain
this attribute has three values inside it. "a.com" "b.com " "c.com "
My goal is to remove the trailing white space. Which may be a space or a weird character.
You can determine what the white space is by saving an .ldif representation [ldapsearch -LLL ... > file]and viewing with a program that views hexcodes like xxd.
I have tried deleting the individual values and re-adding them. I attempted to delete the entire attribute and re-add.
The value keeps appearing like so.
"b.com "
Try editing the .ldif file above and removing the extra characters, modify enough of the attributes so that its unique and add it into the directory using ldapmodify or other standard tool. If this still shows a problem then there is something very unusual about your configuration. If importing the .ldif file is clean I would suspect the technique used to normally add the attributes.
Dan Lannom
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
When attribute values are deleted from entries in a replicated partition they are moved to a hidden state, they need to be kept around in case they need to be resurrected by the update resolution protocol. If you add the same value after deleting it, the underlying mechanism moves it back from the hidden state. I wonder if it's considering the old value equivalent to what you're trying to add. I'm pretty sure spaces don't slip through though, can you verify what character codes the trailing characters are so I can test it?
Ulf
Eddie C wrote:
I have tried adding/removing these attributes a number of different ways. LDIF/LDAP Browser/ FDS admin console. I fully remove the values and the entire attribute but when I re-add them they keep having extra spaces in the end. I almost believe the entry is corrupted in some way.
I do not want to do anything very drastic because only this one entry is showing problems (that I know of)
On 9/24/07, Dan Lannom dlannom@umd.umich.edu wrote:
Eddie C wrote:
I am having an issue that may be related to multi-master replication, or it may be related to a non viewable ascii value in an attribute.
We have a custom schema. We have a multivalued attribute departalloweddomain
this attribute has three values inside it. "a.com" "b.com " "c.com "
My goal is to remove the trailing white space. Which may be a space or a weird character.
You can determine what the white space is by saving an .ldif representation [ldapsearch -LLL ... > file]and viewing with a program that views hexcodes like xxd.
I have tried deleting the individual values and re-adding them. I attempted to delete the entire attribute and re-add.
The value keeps appearing like so.
"b.com "
Try editing the .ldif file above and removing the extra characters, modify enough of the attributes so that its unique and add it into the directory using ldapmodify or other standard tool. If this still shows a problem then there is something very unusual about your configuration. If importing the .ldif file is clean I would suspect the technique used to normally add the attributes.
Dan Lannom
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
Ulf Weltman wrote:
When attribute values are deleted from entries in a replicated partition they are moved to a hidden state, they need to be kept around in case they need to be resurrected by the update resolution protocol. If you add the same value after deleting it, the underlying mechanism moves it back from the hidden state. I wonder if it's considering the old value equivalent to what you're trying to add. I'm pretty sure spaces don't slip through though, can you verify what character codes the trailing characters are so I can test it?
I think they do... I've seen this same problem previously under Sun's directory server.
Just for reference this was some error with replication. When I found the entry on our second multi-master server the spacing was different then the first. After I corrected the second and modified the values again everything corrected itself.
Some how the data fell out of sync and refused to get back in-sync unless it was dealt with on both machines.
On 9/25/07, Gordon Messmer yinyang@eburg.com wrote:
Ulf Weltman wrote:
When attribute values are deleted from entries in a replicated partition they are moved to a hidden state, they need to be kept around in case they need to be resurrected by the update resolution protocol. If you add the same value after deleting it, the underlying mechanism moves it back from the hidden state. I wonder if it's considering the old value equivalent to what you're trying to add. I'm pretty sure spaces don't slip through though, can you verify what character codes the trailing characters are so I can test it?
I think they do... I've seen this same problem previously under Sun's directory server.
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
389-users@lists.fedoraproject.org
-
Dan Lannom -
Edward Capriolo -
ergoxsx -
Gordon Messmer -
Rich Megginson -
Ulf Weltman