[Pkg-openldap-devel] Bug#462667: Bug#462667: slapd: Upgrade fails as LDIF backup has incorrect names

[Steve Langasek]

On Mon, Jan 28, 2008 at 12:15:26AM +0000, Jamie Thompson wrote:
> Steve Langasek wrote:
>> Hi Jamie,
>> So this is the behavior we would expect for a directory containing DNs that
>> aren't below the indicated suffix.  I don't see that there's anything we
>> could do to automatically fix up such directories that I would consider
>> safe.

> ...but I can't access said entries to delete them, as they aren't accessible
> via any means I'm aware of. If you can suggest some way of removing them, I'd
> be very grateful.

- upgrade slapd
- let the postinst fail
- edit the ldif file under /var/backups/slapd-$oldver to remove the invalid
  entries
- re-run dpkg --configure -a

That should do the job.

>> Rather, in this case I think it's as robust as is possible given that your
>> directory contents are such that openldap 2.4 will refuse to work with them.
>> It's my opinion that the current behavior is not a bug, and that letting the
>> admin fix up the results manually is the right thing to do.

> I can see your point of view, but when I ran the upgrade it didn't roll back,
> as the package installed, but the re-import didn't succeed, leaving me without
> a functional directory, which effectively brought down all my services that
> were dependant on it. I didn't cotton on to the fact it was the two bad
> entries until after I had restored manually from the bdb backup. The error
> message I provided was from my subsequent attempt to update.

Well, yes; there's generally no rollback support in Debian packages.  By the
time the new package is being configured, the old binaries have been
entirely replaced by the new, so any attempt to start the server will fail
with this error; and detecting this particular problem is not something that
would be straightforward to do from a maintainer script.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org