Re: [net-ldapapi-software] LDAPapi and aliases

[Quanah Gibson-M. <qu...@zi...>]

--On Wednesday, September 17, 2008 8:00 PM +0200 Dieter Kluenter 
<di...@dk...> wrote:

> Quanah Gibson-Mount <qu...@zi...> writes:
>
>> --On Wednesday, September 17, 2008 11:08 AM +0200 Dieter Kluenter
>> <di...@dk...> wrote:
>>
>>> I just co svn and compiled. This solved my SASL problem, but still
>>> there are the known errors including '0 entries found', although slapd
>>> reports 399 entries.
>>>
>>> /usr/bin/perl -w "/home/dieter/Projekte/perlscripts/ldapwalk.pl"
>>> sn=test003* SASL/DIGEST-MD5 authentication started
>>> Found 0 records
>>
>>
>> What does the slapd log show the incoming query as?  Are you sure that
>> you have the digest-md5 mapping for the identity correct?  It
>> certainly works for me:
>
> Although I have mailed slapd.log already here comes it again:
>
> ,----[ slapd.log ]
>| slapd[3052]: => acl_mask: to value by "cn=dieter
>| kluenter,ou=partner,o=avci,c=de", (=0)  slapd[3052]: <= check a_dn_pat: *
>| slapd[3052]: <= acl_mask: [2] applying read(=rscxd) (stop)
>| slapd[3052]: <= acl_mask: [2] mask: read(=rscxd)
>| slapd[3052]: => slap_access_allowed: read access granted by read(=rscxd)
>| slapd[3052]: => access_allowed: read access granted by read(=rscxd)
>| slapd[3052]: conn=22 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text=
>| slapd[3052]: conn=22 op=4 UNBIND
>| slapd[3052]: conn=22 fd=18 closed

This log snippet fails to include the filter that was used, which is what I 
need to see.

For example, mine shows:

Sep 17 10:18:59 freelancer slapd[28153]: conn=11826 op=2 SRCH 
base="ou=people,dc=freelancer,dc=lab,dc=zimbra,dc=com" scope=2 deref=0 
filter="(uid=testus*)"

at stats level logging.  Perhaps this is a shell issue, since you're 
running this from the command line, and haven't quoted the query?

--Quanah


--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration