Re: [net-ldapapi-software] ldapwalk.pl errors

[Dieter K. <di...@dk...>]

Quanah Gibson-Mount <qu...@zi...> writes:

> --On Thursday, September 18, 2008 10:29 AM -0700 Quanah Gibson-Mount
> <qu...@zi...> wrote:
>
>> --On Thursday, September 18, 2008 11:36 AM +0200 Dieter Kluenter
>> <di...@dk...> wrote:
>>
>>> ep 17 19:29:11 rubin slapd[3052]: conn=19 op=0 BIND
>>> dn="cn=benchmark,o=avci,c=de" mech=SIMPLE ssf=0 Sep 17 19:29:11 rubin
>>> slapd[3052]: => bdb_entry_get: found entry: "cn=benchmark,o=avci,c=de"
>>> Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=0 RESULT tag=97 err=0 text=
>>> Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=1 SRCH
>>> base="ou=benchmark,o=avci,c=de" scope=1 deref=0 filter="(sn=test03*)" Sep
>>> 17 19:29:11 rubin slapd[3052]: conn=19 op=1 SRCH attr=mail
>>> telephonenumber Sep 17 19:29:11 rubin slapd[3052]: => access_allowed:
>>> search access to "ou=benchmark,o=avci,c=de" "entry" requested
>>
>>
>> I suggest you alter your scope.
>
> Hm, although I guess that depends if your entries are all there on
> that level (which works fine for me).
>
> Can you get me the entire log of that particular connection, from bind
> to unbind?  Same for doing the same search via ldapsearch using the
> same identity & filter, so I can compare the two.

OK, here they are. although no visible difference. I have written a
small script that adopts most lines of ldapwalk but it works for me. If
you are interested let me know and I will mail it. I think the main
problem of ldapwalk is in the part beginning with 'Cycle Through Entries', but I could
not trace it down.

,----[ slapd.log ldapwalk.pl ]
| slapd[3012]: conn=33 fd=18 ACCEPT from IP=127.0.0.1:15713 (IP=0.0.0.0:389)
| slapd[3012]: conn=33 op=0 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
| slapd[3012]: conn=33 op=0 SRCH attr=supportedSASLMechanisms
| slapd[3012]: conn=33 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
| slapd[3012]: conn=33 op=1 BIND dn="" method=163
| slapd[3012]: conn=33 op=1 RESULT tag=97 err=14 text=SASL(0): successful result: 
| slapd[3012]: conn=33 op=2 BIND dn="" method=163
| slapd[3012]: SASL [conn=33] Error: unable to open Berkeley db /etc/sasldb2: No such file or directory
| slapd[3012]: conn=33 op=2 BIND authcid="benchmark" authzid="benchmark"
| slapd[3012]: conn=33 op=2 BIND dn="cn=benchmark,o=avci,c=de" mech=DIGEST-MD5 sasl_ssf=128 ssf=128
| slapd[3012]: conn=33 op=2 RESULT tag=97 err=0 text=
| slapd[3012]: conn=33 op=3 SRCH base="ou=benchmark,o=avci,c=de" scope=1 deref=0 filter="(sn=test03*)"
| slapd[3012]: conn=33 op=4 UNBIND
| slapd[3012]: conn=33 op=3 SEARCH RESULT tag=101 err=0 nentries=100 text=
| slapd[3012]: conn=33 fd=18 closed
`----

,----[ slapd.log ldapsearch ]
| slapd[3012]: conn=35 fd=18 ACCEPT from IP=127.0.0.1:20256 (IP=0.0.0.0:389)
| slapd[3012]: conn=35 op=0 BIND dn="" method=163
| slapd[3012]: conn=35 op=0 RESULT tag=97 err=14 text=SASL(0): successful result: 
| slapd[3012]: conn=35 op=1 BIND dn="" method=163
| slapd[3012]: SASL [conn=35] Error: unable to open Berkeley db /etc/sasldb2: No such file or directory
| slapd[3012]: conn=35 op=1 BIND authcid="benchmark" authzid="benchmark"
| slapd[3012]: conn=35 op=1 BIND dn="cn=benchmark,o=avci,c=de" mech=DIGEST-MD5 sasl_ssf=128 ssf=128
| slapd[3012]: conn=35 op=1 RESULT tag=97 err=0 text=
| slapd[3012]: conn=35 op=2 SRCH base="ou=benchmark,o=avci,c=de" scope=2 deref=0 filter="(sn=test03*)"
| slapd[3012]: conn=35 op=2 SRCH attr=*
| slapd[3012]: conn=35 op=3 UNBIND
| slapd[3012]: conn=35 op=2 SEARCH RESULT tag=101 err=0 nentries=100 text=
| slapd[3012]: conn=35 fd=18 closed
`----


-Dieter

-- 
Dieter Klünter | Systemberatung
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6
53°08'09,95"N
10°08'02,42"E