org.forgerock / org.forgerock.opendj

03 Aug, 2007

4 commits

02 Aug, 2007

3 commits

01 Aug, 2007

2 commits

  • fe1a14b9   Use DsframeworkReturnCode enum in a more 'classical' way ... Browse Dir » 
    git-svn-id: https://svn.forgerock.org/opendj/trunk@2541 41b1ffd8-f28e-4786-ab96-9950f0a78031
    lutoff
     
  • 5667d12e   Add ACI support to control whether a "smart referral" (named subordinate references -- RFC 3296) ... Browse Dir » 
    may be returned to a client. Smart referral entries contain the referral objectclass and
have one or more "ref" attributes containing LDAP URLS. The ref attribute type has usage
distributedOperation, so the operational shorthand '+' character can be used to match it:

(targetattr="+")(version 3.0; acl "ref wild-card"; allow(read) userdn="ldap:///anyone";)

or it can be explicitly used:

(targetattr="ref")(version 3.0; acl "ref"; allow(read) userdn="ldap:///anyone";)

It is also possible to add an ACI on the referral entry itself:

dn: uid=smart, ou=People, dc=example, dc=com
objectclass: top
objectClass: extensibleobject
objectClass: referral
ref: ldap://kansashost/OU=People,O=Kansas,C=US
ref: ldap://texashost/OU=People,O=Texas,C=US
aci: (targetattr = "ref")(version 3.0; acl "add_aci"; allow (read) userdn="ldap://anyone";)

git-svn-id: https://svn.forgerock.org/opendj/trunk@2539 41b1ffd8-f28e-4786-ab96-9950f0a78031
    dugan
     

31 Jul, 2007

6 commits

30 Jul, 2007

13 commits

29 Jul, 2007

5 commits

28 Jul, 2007

1 commit

27 Jul, 2007

6 commits

  • 7439e734   These set of changes implement VLV and filter capability to OpenDS: ... Browse Dir » 
    - A VLV index is defined by a name, base DN, search filter, search scope, sort order. A search request must match these parameters exactly to 
use the VLV index.
- A VLV index made up of the entry IDs matching the definition criteria (above) and the corresponding attribute values that are part of the sort 
order in the sort order. This information is broken up into blocks of sorted sets. The block size can be configured through admin framework. 
Default block size is 4000. In the database, the sorted set is stored with the following format:

      4 byte set size | entry IDs of 8 bytes each ... | attribute values of 16 bytes each ...

- Each sorted set is keyed by the entry ID and attribute values of the largest entry in the sorted set. A special comparator (VLVKeyComparator) 
is used to sort the keys in the database in the order of the specified sort order.
- When entries are added to the VLV index, its sort values are extracted and inserted into the sorted set whose key (also the largest entry in 
the set) is the smallest key that represents a entry that is greater or equal to the entry being inserted. If the sorted set exceeds the block 
size, it is divided in two and stored back into the database with the new key. In this implementation, a sorted set's key is never changed after 
it is created.
- On importing from LDIF, each entry's sort values and ID is written out to a intermediate file in order. These files are later merged and 
inserted into the database.
- Index rebuild and verify also works with VLV indexes. The verify job ensures that all the entries stored in the VLV index is in the correct 
order.
- With this implementation, once a VLV index is created, it can not be changed without a rebuild. The server will NOT warn the user if 
the index 
has changed offline. Until a rebuild is done, it can return incorrect results. This should be fixed later.
- Performance wise, modify, add, and delete performance will be degraded if the entry matches the indexing criteria. Searches not using the VLV 
index should not see any notable performance degradation. If the block size is set too big, there is a potential that a large number of updates 
will result in some JE lock timeouts since the few sorted sets are hotly contested. However, if the block size is too small, searches using the 
VLV control with offsets could be slow since there are more records to look through. This area need further investigation to determine the 
optimal default value.

Fix for issue 38


git-svn-id: https://svn.forgerock.org/opendj/trunk@2499 41b1ffd8-f28e-4786-ab96-9950f0a78031
    boli
     
  • 1dd84ecd   An ldif file that is no longer needed in the functional tests suites. ... Browse Dir » 
    
git-svn-id: https://svn.forgerock.org/opendj/trunk@2498 41b1ffd8-f28e-4786-ab96-9950f0a78031
    mkeyes
     
  • b132ce4b   Removing a function call that was needed way back before global ACIs were implem… ... Browse Dir » 
    …ented. This function call is no longer needed for the ACI test suites.


git-svn-id: https://svn.forgerock.org/opendj/trunk@2497 41b1ffd8-f28e-4786-ab96-9950f0a78031
    mkeyes
     
  • 47da4bcd   More upgrades to the ACI functional tests to reflect the recent commit in revision 2449. ... Browse Dir » 
    
git-svn-id: https://svn.forgerock.org/opendj/trunk@2496 41b1ffd8-f28e-4786-ab96-9950f0a78031
    mkeyes
     
  • 2511f440   More upgrades to the ACI functional tests to reflect the recent commit in revision 2449. ... Browse Dir » 
    
git-svn-id: https://svn.forgerock.org/opendj/trunk@2495 41b1ffd8-f28e-4786-ab96-9950f0a78031
    mkeyes
     
  • 960931f5   Altered test code to get around build failures with pre-1.5.0_08 JVMs. This pro… ... Browse Dir » 
    …blem especially affected Mac users since 1.5.0_08 JVM is not available on that platform.

git-svn-id: https://svn.forgerock.org/opendj/trunk@2494 41b1ffd8-f28e-4786-ab96-9950f0a78031
    davidely