Bug 12169 - acl_modify: attribute 'DEL' on entry was not found in the schema!
Summary: acl_modify: attribute 'DEL' on entry was not found in the schema!
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.5.0rc2
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-08-19 17:35 UTC by Marc Muehlfeld
Modified: 2016-08-21 13:29 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marc Muehlfeld 2016-08-19 17:35:41 UTC 
If you edit a deleted object and exit the editor using :wq but without making any changes, an error occours.


Steps to reproduce:
1.) Delete an object. For example a user account.

2.) Open the deleted object in ldbedit:
    # ldbedit -H ldap://localhost -Uadministrator --show-recycled --show-binary --show-deleted -b "CN=demo08\\0ADEL:85f2ba20-7474-42e5-a9f5-c6cb6356bc42,CN=Deleted Objects,DC=samdom,DC=example,DC=com"

3.) Save and exit the editor _without_ making any changes (:wq).



Actual results:
failed to modify CN=demo08\0ADEL:85f2ba20-7474-42e5-a9f5-c6cb6356bc42,CN=Deleted Objects,DC=samdom,DC=example,DC=com - LDAP error 16 LDAP_NO_SUCH_ATTRIBUTE -  <acl_modify: attribute 'DEL' on entry 'CN=demo08\0ADEL:85f2ba20-7474-42e5-a9f5-c6cb6356bc42,CN=Deleted Objects,DC=samdom,DC=example,DC=com' was not found in the schema!> <>



Expected results (this is the result doing the same on a not-deleted object):
# 0 adds  0 modifies  0 deletes
Comment 1 Stefan Metzmacher 2016-08-21 12:13:03 UTC 
(In reply to Marc Muehlfeld from comment #0)

Never!!!! use --show-binary on anything other than ldbsearch.

Does this also happen without?
Comment 2 Marc Muehlfeld 2016-08-21 13:29:43 UTC 
(In reply to Stefan Metzmacher from comment #1)
> Does this also happen without?

No, it doesn't.



> Never!!!! use --show-binary on anything other than ldbsearch.

Why do we provide this option in ldbadd|ldbdel|ldbmodify|ldbrename if there is a reason to never use it? Can we remove this option from the commands or at least remove it from --help.