<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">HI Ludwig,<br>
<br>
Thanks for catching that, I will update the doc. <br>
When the legacy server receives an aci with that new syntax, it
does not recognize the new keywords (moddn, target_to,
target_from) so the parser fails and the aci is simply ignored.<br>
In the implementation (__aclp__parse_ac) , 'target_to' and
'target_from' should be tested before 'target' because the way it
is coded 'target_to'/'target_from' could be interpreted as
'target' keyword. <br>
<br>
regards<br>
thierry<br>
On 02/27/2014 05:36 PM, Ludwig Krispenz wrote:<br>
</div>
<blockquote cite="mid:530F6984.8050300@redhat.com" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
Hi,<br>
<br>
in the replication section you describe the behaviour when
replicating to older versions of ds, but this is for n1, how about
the new design ?<br>
<br>
Ludwig<br>
<div class="moz-cite-prefix">On 02/27/2014 04:46 PM, thierry
bordaz wrote:<br>
</div>
<blockquote cite="mid:530F5DC4.9050909@redhat.com" type="cite">
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<font face="Times New Roman, Times, serif">Hello,<br>
<br>
</font> <font face="Times New Roman, Times, serif">Thanks to
all your feedbacks, they helped me a lot and raised a severe
limitation in the original design.<br>
I updated the design following the aci syntax proposed during
the discussion.<br>
On the implementation side, it is a bit more complex but less
than I expected. I have not yet investigated the impact of ger
operations.<br>
<br>
I think a big work will be the test side as the ACI syntax
provides many options.<br>
<br>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://port389.org/wiki/Access_control_on_trees_specified_in_MODDN_operation">http://port389.org/wiki/Access_control_on_trees_specified_in_MODDN_operation</a><br>
<br>
Note: I kept for the moment the original design in
'alternative no1'. <br>
<br>
regards<br>
thierry </font> <br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-devel mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre>
</blockquote>
<br>
</body>
</html>