Re: [net-ldapapi-software] LDAPapi and aliases

[Quanah Gibson-M. <qu...@zi...>]

--On Wednesday, September 17, 2008 9:53 PM +0200 Dieter Kluenter 
<di...@dk...> wrote:

> Quanah Gibson-Mount <qu...@zi...> writes:
>
>> --On Wednesday, September 17, 2008 9:09 PM +0200 Dieter Kluenter
>> <di...@dk...> wrote:
>>
>>> OK, this snipped shows just the last attribute 'mobile', access has
>>> been granted to all other attributs as well.
>>
>> My question is not what can it see or not see.  My question is, what
>> is it looking for?  What is the filter slapd thinks was requested?
>> You're example execution:
>
> The filter is defined in ldapwalk.pl
>
> my $filter = $ARGV[0];
> my @attrs = ();

Again,

What does the LDAP SERVER log as the filter it received.  I'm not asking 
what the script does on its side of things.  If the LDAP SERVER is not 
receiving the correct filter from the script because of shell quoting 
issues, your lack of results makes sense.

As I noted in my previous email a while ago, the LDAP SERVER in my case 
logs:


Sep 17 10:18:59 freelancer slapd[28153]: conn=11826 op=2 SRCH
base="ou=people,dc=freelancer,dc=lab,dc=zimbra,dc=com" scope=2 deref=0
filter="(uid=testus*)"

which means it
(a) got a base of
Sep 17 10:18:59 freelancer slapd[28153]: conn=11826 op=2 SRCH
base="ou=people,dc=freelancer,dc=lab,dc=zimbra,dc=com" scope=2 deref=0
filter="(uid=testus*)"

(b) a scope of subtree

(c) and a FILTER of "(uid=testus*)"


--Quanah


--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration