From da7c2116996d26d22b3eca9f20cb497791dbb857 Mon Sep 17 00:00:00 2001 From: boli <boli@localhost> Date: Fri, 15 Sep 2006 16:54:57 +0000 Subject: [PATCH] This uses the new FilePermission framework to set permissions on the directory holding the database files. The new config attribute ds-cfg-backend-mode is optional and by default has a value of 700. The permissions are set on backend initialization as well as on the fly via LDAP. The server will make sure the file permissions will allow owner access before setting. Any exceptions encountered while setting the attribute will result in non fatal errors which are logged. However, any configuration exceptions will keep the backend from starting. --- opends/resource/schema/02-config.ldif | 6 +++++- 1 files changed, 5 insertions(+), 1 deletions(-) diff --git a/opends/resource/schema/02-config.ldif b/opends/resource/schema/02-config.ldif index 87f607e..81526d3 100644 --- a/opends/resource/schema/02-config.ldif +++ b/opends/resource/schema/02-config.ldif @@ -981,6 +981,9 @@ attributeTypes: ( 1.3.6.1.4.1.26027.1.1.286 NAME 'ds-rlim-lookthrough-limit' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE USAGE directoryOperation X-ORIGIN 'OpenDS Directory Server' ) +attributeTypes: ( 1.3.6.1.4.1.26027.1.1.287 NAME 'ds-cfg-backend-mode' + SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE + X-ORIGIN 'OpenDS Directory Server' ) objectClasses: ( 1.3.6.1.4.1.26027.1.2.1 NAME 'ds-cfg-access-control-handler' SUP top STRUCTURAL MUST ( cn $ ds-cfg-acl-handler-class $ ds-cfg-acl-handler-enabled ) @@ -1007,7 +1010,8 @@ ds-cfg-backend-import-temp-directory $ ds-cfg-backend-import-buffer-size $ ds-cfg-backend-import-queue-size $ ds-cfg-backend-import-thread-count $ ds-cfg-backend-entries-compressed $ ds-cfg-backend-deadlock-retry-limit $ - ds-cfg-backend-import-pass-size ) X-ORIGIN 'OpenDS Directory Server' ) + ds-cfg-backend-import-pass-size $ ds-cfg-backend-mode ) + X-ORIGIN 'OpenDS Directory Server' ) objectClasses: ( 1.3.6.1.4.1.26027.1.2.7 NAME 'ds-cfg-je-database' SUP top STRUCTURAL MAY ( cn $ ds-cfg-database-cache-percent $ ds-cfg-database-cache-size $ ds-cfg-database-txn-no-sync $ -- Gitblit v1.10.0