Eddie C
2007-Sep-24 20:37 UTC
[Fedora-directory-users] white space at the end of attributes that refuses to go away
I am having an issue that may be related to multi-master replication, or it may be related to a non viewable ascii value in an attribute. We have a custom schema. We have a multivalued attribute departalloweddomain this attribute has three values inside it. "a.com" "b.com " "c.com " My goal is to remove the trailing white space. Which may be a space or a weird character. I have tried deleting the individual values and re-adding them. I attempted to delete the entire attribute and re-add. The value keeps appearing like so. "b.com " Any ideas on how to clean this up. We do thousands of add and remove operations a day and this has happened a few times.
Dan Lannom
2007-Sep-24 21:41 UTC
Re: [Fedora-directory-users] white space at the end of attributes that refuses to go away
Eddie C wrote:> I am having an issue that may be related to multi-master replication, > or it may be related to a non viewable ascii value in an attribute. > > We have a custom schema. We have a multivalued attribute > departalloweddomain > > this attribute has three values inside it. > "a.com" > "b.com " > "c.com " > > My goal is to remove the trailing white space. Which may be a space or > a weird character.You can determine what the white space is by saving an .ldif representation [ldapsearch -LLL ... > file]and viewing with a program that views hexcodes like xxd.> I have tried deleting the individual values and re-adding them. > I attempted to delete the entire attribute and re-add. > > The value keeps appearing like so. > > "b.com " >Try editing the .ldif file above and removing the extra characters, modify enough of the attributes so that its unique and add it into the directory using ldapmodify or other standard tool. If this still shows a problem then there is something very unusual about your configuration. If importing the .ldif file is clean I would suspect the technique used to normally add the attributes. Dan Lannom
ergoxsx
2007-Sep-25 01:22 UTC
[Fedora-directory-users] new installation - console working but web can not find objects
hi, am a directory service newbie and i just got fedora-ds installed on fedora 7. i can search users/objects thru console but web can not do any search. message is the ff: ------------------------------------------ Forbidden You don''t have permission to access /dsgw/bin/lang on this server. ------------------------------------------ same message for any kind of search thru the web. tried to change permissions for dsgw but nothing changed. any idea? TIA. -ergo-
Richard Megginson
2007-Sep-25 01:28 UTC
Re: [Fedora-directory-users] new installation - console working but web can not find objects
ergoxsx wrote:> hi, > > am a directory service newbie and i just got fedora-ds installed on > fedora 7. > i can search users/objects thru console but web can not do any search. > > message is the ff: > > > ------------------------------------------ > Forbidden > > You don''t have permission to access /dsgw/bin/lang on this server. > > ------------------------------------------ > > > same message for any kind of search thru the web. > tried to change permissions for dsgw but nothing changed. > > any idea?Check the access and error logs for the admin server - /opt/fedora-ds/admin-serv/logs> > TIA. > > -ergo- > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users
Eddie C
2007-Sep-25 17:47 UTC
Re: [Fedora-directory-users] white space at the end of attributes that refuses to go away
I have tried adding/removing these attributes a number of different ways. LDIF/LDAP Browser/ FDS admin console. I fully remove the values and the entire attribute but when I re-add them they keep having extra spaces in the end. I almost believe the entry is corrupted in some way. I do not want to do anything very drastic because only this one entry is showing problems (that I know of) On 9/24/07, Dan Lannom <dlannom@umd.umich.edu> wrote:> Eddie C wrote: > > I am having an issue that may be related to multi-master replication, > > or it may be related to a non viewable ascii value in an attribute. > > > > We have a custom schema. We have a multivalued attribute > > departalloweddomain > > > > this attribute has three values inside it. > > "a.com" > > "b.com " > > "c.com " > > > > My goal is to remove the trailing white space. Which may be a space or > > a weird character. > > You can determine what the white space is by saving an .ldif > representation [ldapsearch -LLL ... > file]and viewing with a program > that views hexcodes like xxd. > > > > I have tried deleting the individual values and re-adding them. > > I attempted to delete the entire attribute and re-add. > > > > The value keeps appearing like so. > > > > "b.com " > > > > Try editing the .ldif file above and removing the extra characters, > modify enough of the attributes so that its unique and add it into the > directory using ldapmodify or other standard tool. If this still shows > a problem then there is something very unusual about your configuration. > If importing the .ldif file is clean I would suspect the technique > used to normally add the attributes. > > Dan Lannom > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Ulf Weltman
2007-Sep-25 18:21 UTC
Re: [Fedora-directory-users] white space at the end of attributes that refuses to go away
When attribute values are deleted from entries in a replicated partition they are moved to a hidden state, they need to be kept around in case they need to be resurrected by the update resolution protocol. If you add the same value after deleting it, the underlying mechanism moves it back from the hidden state. I wonder if it''s considering the old value equivalent to what you''re trying to add. I''m pretty sure spaces don''t slip through though, can you verify what character codes the trailing characters are so I can test it? Ulf Eddie C wrote:> I have tried adding/removing these attributes a number of different > ways. LDIF/LDAP Browser/ FDS admin console. I fully remove the values > and the entire attribute but when I re-add them they keep having extra > spaces in the end. I almost believe the entry is corrupted in some > way. > > I do not want to do anything very drastic because only this one entry > is showing problems (that I know of) > > > > On 9/24/07, Dan Lannom <dlannom@umd.umich.edu> wrote: > >> Eddie C wrote: >> >>> I am having an issue that may be related to multi-master replication, >>> or it may be related to a non viewable ascii value in an attribute. >>> >>> We have a custom schema. We have a multivalued attribute >>> departalloweddomain >>> >>> this attribute has three values inside it. >>> "a.com" >>> "b.com " >>> "c.com " >>> >>> My goal is to remove the trailing white space. Which may be a space or >>> a weird character. >>> >> You can determine what the white space is by saving an .ldif >> representation [ldapsearch -LLL ... > file]and viewing with a program >> that views hexcodes like xxd. >> >> >> >>> I have tried deleting the individual values and re-adding them. >>> I attempted to delete the entire attribute and re-add. >>> >>> The value keeps appearing like so. >>> >>> "b.com " >>> >>> >> Try editing the .ldif file above and removing the extra characters, >> modify enough of the attributes so that its unique and add it into the >> directory using ldapmodify or other standard tool. If this still shows >> a problem then there is something very unusual about your configuration. >> If importing the .ldif file is clean I would suspect the technique >> used to normally add the attributes. >> >> Dan Lannom >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > >
Gordon Messmer
2007-Sep-25 23:11 UTC
Re: [Fedora-directory-users] white space at the end of attributes that refuses to go away
Ulf Weltman wrote:> When attribute values are deleted from entries in a replicated partition > they are moved to a hidden state, they need to be kept around in case > they need to be resurrected by the update resolution protocol. If you > add the same value after deleting it, the underlying mechanism moves it > back from the hidden state. I wonder if it''s considering the old value > equivalent to what you''re trying to add. I''m pretty sure spaces don''t > slip through though, can you verify what character codes the trailing > characters are so I can test it?I think they do... I''ve seen this same problem previously under Sun''s directory server.
ergoxsx
2007-Sep-26 08:31 UTC
Re: [Fedora-directory-users] new installation - console working but web can not find objects
/opt/fedora-ds/admin-serv/logs shows the following. ldap.abc.com is registered in local dns server and also in /etc/hosts. [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.2, referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch any ideas? Richard Megginson wrote:> ergoxsx wrote: >> hi, >> >> am a directory service newbie and i just got fedora-ds installed on >> fedora 7. >> i can search users/objects thru console but web can not do any search. >> >> message is the ff: >> >> >> ------------------------------------------ >> Forbidden >> >> You don''t have permission to access /dsgw/bin/lang on this server. >> >> ------------------------------------------ >> >> >> same message for any kind of search thru the web. >> tried to change permissions for dsgw but nothing changed. >> >> any idea? > Check the access and error logs for the admin server - > /opt/fedora-ds/admin-serv/logs >> >> TIA. >> >> -ergo- >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Richard Megginson
2007-Sep-26 13:45 UTC
Re: [Fedora-directory-users] new installation - console working but web can not find objects
ergoxsx wrote:> /opt/fedora-ds/admin-serv/logs shows the following. > ldap.abc.com is registered in local dns server and also in /etc/hosts. > > [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] > admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.2, > referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearchCan you see the request for dsgw/bin/lang in the access log?> > any ideas? > > > > Richard Megginson wrote: >> ergoxsx wrote: >>> hi, >>> >>> am a directory service newbie and i just got fedora-ds installed on >>> fedora 7. >>> i can search users/objects thru console but web can not do any search. >>> >>> message is the ff: >>> >>> >>> ------------------------------------------ >>> Forbidden >>> >>> You don''t have permission to access /dsgw/bin/lang on this server. >>> >>> ------------------------------------------ >>> >>> >>> same message for any kind of search thru the web. >>> tried to change permissions for dsgw but nothing changed. >>> >>> any idea? >> Check the access and error logs for the admin server - >> /opt/fedora-ds/admin-serv/logs >>> >>> TIA. >>> >>> -ergo- >>> >>> -- >>> Fedora-directory-users mailing list >>> Fedora-directory-users@redhat.com >>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> ------------------------------------------------------------------------ >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users
ergoxsx
2007-Sep-27 03:31 UTC
Re: [Fedora-directory-users] new installation - console working but web can not find objects
ah, sorry... here it is: [Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=intro.html [Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.html [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.html what does this mean? i tried to change permissions but same type of output. Richard Megginson wrote:> ergoxsx wrote: >> /opt/fedora-ds/admin-serv/logs shows the following. >> ldap.abc.com is registered in local dns server and also in /etc/hosts. >> >> [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] >> admserv_host_ip_check: ap_get_remote_host could not resolve >> 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch > Can you see the request for dsgw/bin/lang in the access log? >> >> any ideas? >> >> >> >> Richard Megginson wrote: >>> ergoxsx wrote: >>>> hi, >>>> >>>> am a directory service newbie and i just got fedora-ds installed on >>>> fedora 7. >>>> i can search users/objects thru console but web can not do any search. >>>> >>>> message is the ff: >>>> >>>> >>>> ------------------------------------------ >>>> Forbidden >>>> >>>> You don''t have permission to access /dsgw/bin/lang on this server. >>>> >>>> ------------------------------------------ >>>> >>>> >>>> same message for any kind of search thru the web. >>>> tried to change permissions for dsgw but nothing changed. >>>> >>>> any idea? >>> Check the access and error logs for the admin server - >>> /opt/fedora-ds/admin-serv/logs >>>> >>>> TIA. >>>> >>>> -ergo- >>>> >>>> -- >>>> Fedora-directory-users mailing list >>>> Fedora-directory-users@redhat.com >>>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >>> >>> ------------------------------------------------------------------------ >>> >>> >>> -- >>> Fedora-directory-users mailing list >>> Fedora-directory-users@redhat.com >>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >>> >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Eddie C
2007-Sep-27 04:45 UTC
Re: [Fedora-directory-users] white space at the end of attributes that refuses to go away
Just for reference this was some error with replication. When I found the entry on our second multi-master server the spacing was different then the first. After I corrected the second and modified the values again everything corrected itself. Some how the data fell out of sync and refused to get back in-sync unless it was dealt with on both machines. On 9/25/07, Gordon Messmer <yinyang@eburg.com> wrote:> Ulf Weltman wrote: > > When attribute values are deleted from entries in a replicated partition > > they are moved to a hidden state, they need to be kept around in case > > they need to be resurrected by the update resolution protocol. If you > > add the same value after deleting it, the underlying mechanism moves it > > back from the hidden state. I wonder if it''s considering the old value > > equivalent to what you''re trying to add. I''m pretty sure spaces don''t > > slip through though, can you verify what character codes the trailing > > characters are so I can test it? > > I think they do... I''ve seen this same problem previously under Sun''s > directory server. > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >
Richard Megginson
2007-Sep-27 14:04 UTC
Re: [Fedora-directory-users] new installation - console working but web can not find objects
ergoxsx wrote:> ah, sorry... here it is: > > [Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] > admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, > referer: > http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=intro.html > [Wed Sep 26 13:57:30 2007] [notice] [client 10.0.0.22] > admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, > referer: > http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.html > [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] > admserv_host_ip_check: ap_get_remote_host could not resolve 10.0.0.22, > referer: > http://ldap.abc.com:1500/clients/dsgw/bin/lang?context=pb&file=phone.html > > what does this mean?This message is usually benign.> i tried to change permissions but same type of output.This looks like the output from the error log. Can you find the corresponding request from the access log?> > > > > Richard Megginson wrote: >> ergoxsx wrote: >>> /opt/fedora-ds/admin-serv/logs shows the following. >>> ldap.abc.com is registered in local dns server and also in /etc/hosts. >>> >>> [Wed Sep 26 13:57:34 2007] [notice] [client 10.0.0.22] >>> admserv_host_ip_check: ap_get_remote_host could not resolve >>> 10.0.0.22, referer: http://ldap.abc.com:1500/clients/dsgw/bin/dosearch >> Can you see the request for dsgw/bin/lang in the access log? >>> >>> any ideas? >>> >>> >>> >>> Richard Megginson wrote: >>>> ergoxsx wrote: >>>>> hi, >>>>> >>>>> am a directory service newbie and i just got fedora-ds installed >>>>> on fedora 7. >>>>> i can search users/objects thru console but web can not do any >>>>> search. >>>>> >>>>> message is the ff: >>>>> >>>>> >>>>> ------------------------------------------ >>>>> Forbidden >>>>> >>>>> You don''t have permission to access /dsgw/bin/lang on this server. >>>>> >>>>> ------------------------------------------ >>>>> >>>>> >>>>> same message for any kind of search thru the web. >>>>> tried to change permissions for dsgw but nothing changed. >>>>> >>>>> any idea? >>>> Check the access and error logs for the admin server - >>>> /opt/fedora-ds/admin-serv/logs >>>>> >>>>> TIA. >>>>> >>>>> -ergo- >>>>> >>>>> -- >>>>> Fedora-directory-users mailing list >>>>> Fedora-directory-users@redhat.com >>>>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >>>> >>>> ------------------------------------------------------------------------ >>>> >>>> >>>> -- >>>> Fedora-directory-users mailing list >>>> Fedora-directory-users@redhat.com >>>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >>>> >>> >>> -- >>> Fedora-directory-users mailing list >>> Fedora-directory-users@redhat.com >>> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> >> ------------------------------------------------------------------------ >> >> -- >> Fedora-directory-users mailing list >> Fedora-directory-users@redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-directory-users >> > > -- > Fedora-directory-users mailing list > Fedora-directory-users@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users