From: Dieter K. <di...@dk...> - 2008-09-18 11:36:08
|
Quanah Gibson-Mount <qu...@zi...> writes: > --On Thursday, September 18, 2008 10:29 AM -0700 Quanah Gibson-Mount > <qu...@zi...> wrote: > >> --On Thursday, September 18, 2008 11:36 AM +0200 Dieter Kluenter >> <di...@dk...> wrote: >> >>> ep 17 19:29:11 rubin slapd[3052]: conn=19 op=0 BIND >>> dn="cn=benchmark,o=avci,c=de" mech=SIMPLE ssf=0 Sep 17 19:29:11 rubin >>> slapd[3052]: => bdb_entry_get: found entry: "cn=benchmark,o=avci,c=de" >>> Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=0 RESULT tag=97 err=0 text= >>> Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=1 SRCH >>> base="ou=benchmark,o=avci,c=de" scope=1 deref=0 filter="(sn=test03*)" Sep >>> 17 19:29:11 rubin slapd[3052]: conn=19 op=1 SRCH attr=mail >>> telephonenumber Sep 17 19:29:11 rubin slapd[3052]: => access_allowed: >>> search access to "ou=benchmark,o=avci,c=de" "entry" requested >> >> >> I suggest you alter your scope. > > Hm, although I guess that depends if your entries are all there on > that level (which works fine for me). > > Can you get me the entire log of that particular connection, from bind > to unbind? Same for doing the same search via ldapsearch using the > same identity & filter, so I can compare the two. OK, here they are. although no visible difference. I have written a small script that adopts most lines of ldapwalk but it works for me. If you are interested let me know and I will mail it. I think the main problem of ldapwalk is in the part beginning with 'Cycle Through Entries', but I could not trace it down. ,----[ slapd.log ldapwalk.pl ] | slapd[3012]: conn=33 fd=18 ACCEPT from IP=127.0.0.1:15713 (IP=0.0.0.0:389) | slapd[3012]: conn=33 op=0 SRCH base="" scope=0 deref=0 filter="(objectClass=*)" | slapd[3012]: conn=33 op=0 SRCH attr=supportedSASLMechanisms | slapd[3012]: conn=33 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text= | slapd[3012]: conn=33 op=1 BIND dn="" method=163 | slapd[3012]: conn=33 op=1 RESULT tag=97 err=14 text=SASL(0): successful result: | slapd[3012]: conn=33 op=2 BIND dn="" method=163 | slapd[3012]: SASL [conn=33] Error: unable to open Berkeley db /etc/sasldb2: No such file or directory | slapd[3012]: conn=33 op=2 BIND authcid="benchmark" authzid="benchmark" | slapd[3012]: conn=33 op=2 BIND dn="cn=benchmark,o=avci,c=de" mech=DIGEST-MD5 sasl_ssf=128 ssf=128 | slapd[3012]: conn=33 op=2 RESULT tag=97 err=0 text= | slapd[3012]: conn=33 op=3 SRCH base="ou=benchmark,o=avci,c=de" scope=1 deref=0 filter="(sn=test03*)" | slapd[3012]: conn=33 op=4 UNBIND | slapd[3012]: conn=33 op=3 SEARCH RESULT tag=101 err=0 nentries=100 text= | slapd[3012]: conn=33 fd=18 closed `---- ,----[ slapd.log ldapsearch ] | slapd[3012]: conn=35 fd=18 ACCEPT from IP=127.0.0.1:20256 (IP=0.0.0.0:389) | slapd[3012]: conn=35 op=0 BIND dn="" method=163 | slapd[3012]: conn=35 op=0 RESULT tag=97 err=14 text=SASL(0): successful result: | slapd[3012]: conn=35 op=1 BIND dn="" method=163 | slapd[3012]: SASL [conn=35] Error: unable to open Berkeley db /etc/sasldb2: No such file or directory | slapd[3012]: conn=35 op=1 BIND authcid="benchmark" authzid="benchmark" | slapd[3012]: conn=35 op=1 BIND dn="cn=benchmark,o=avci,c=de" mech=DIGEST-MD5 sasl_ssf=128 ssf=128 | slapd[3012]: conn=35 op=1 RESULT tag=97 err=0 text= | slapd[3012]: conn=35 op=2 SRCH base="ou=benchmark,o=avci,c=de" scope=2 deref=0 filter="(sn=test03*)" | slapd[3012]: conn=35 op=2 SRCH attr=* | slapd[3012]: conn=35 op=3 UNBIND | slapd[3012]: conn=35 op=2 SEARCH RESULT tag=101 err=0 nentries=100 text= | slapd[3012]: conn=35 fd=18 closed `---- -Dieter -- Dieter Klünter | Systemberatung http://www.dpunkt.de/buecher/2104.html GPG Key ID:8EF7B6C6 53°08'09,95"N 10°08'02,42"E |