From: Quanah Gibson-M. <qu...@zi...> - 2008-09-18 12:27:57
|
--On Thursday, September 18, 2008 8:36 PM +0200 Dieter Kluenter <di...@dk...> wrote: > Quanah Gibson-Mount <qu...@zi...> writes: > >> --On Thursday, September 18, 2008 10:29 AM -0700 Quanah Gibson-Mount >> <qu...@zi...> wrote: >> >>> --On Thursday, September 18, 2008 11:36 AM +0200 Dieter Kluenter >>> <di...@dk...> wrote: >>> >>>> ep 17 19:29:11 rubin slapd[3052]: conn=19 op=0 BIND >>>> dn="cn=benchmark,o=avci,c=de" mech=SIMPLE ssf=0 Sep 17 19:29:11 rubin >>>> slapd[3052]: => bdb_entry_get: found entry: "cn=benchmark,o=avci,c=de" >>>> Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=0 RESULT tag=97 err=0 >>>> text= Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=1 SRCH >>>> base="ou=benchmark,o=avci,c=de" scope=1 deref=0 filter="(sn=test03*)" >>>> Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=1 SRCH attr=mail >>>> telephonenumber Sep 17 19:29:11 rubin slapd[3052]: => access_allowed: >>>> search access to "ou=benchmark,o=avci,c=de" "entry" requested >>> >>> >>> I suggest you alter your scope. >> >> Hm, although I guess that depends if your entries are all there on >> that level (which works fine for me). >> >> Can you get me the entire log of that particular connection, from bind >> to unbind? Same for doing the same search via ldapsearch using the >> same identity & filter, so I can compare the two. > > OK, here they are. although no visible difference. I have written a > small script that adopts most lines of ldapwalk but it works for me. If > you are interested let me know and I will mail it. I think the main > problem of ldapwalk is in the part beginning with 'Cycle Through > Entries', but I could not trace it down. > > ,----[ slapd.log ldapwalk.pl ] >| slapd[3012]: conn=33 fd=18 ACCEPT from IP=127.0.0.1:15713 >| (IP=0.0.0.0:389) slapd[3012]: conn=33 op=0 SRCH base="" scope=0 deref=0 >| filter="(objectClass=*)" slapd[3012]: conn=33 op=0 SRCH >| attr=supportedSASLMechanisms >| slapd[3012]: conn=33 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text= >| slapd[3012]: conn=33 op=1 BIND dn="" method=163 >| slapd[3012]: conn=33 op=1 RESULT tag=97 err=14 text=SASL(0): successful >| result: slapd[3012]: conn=33 op=2 BIND dn="" method=163 >| slapd[3012]: SASL [conn=33] Error: unable to open Berkeley db >| /etc/sasldb2: No such file or directory slapd[3012]: conn=33 op=2 BIND >| authcid="benchmark" authzid="benchmark" slapd[3012]: conn=33 op=2 BIND >| dn="cn=benchmark,o=avci,c=de" mech=DIGEST-MD5 sasl_ssf=128 ssf=128 >| slapd[3012]: conn=33 op=2 RESULT tag=97 err=0 text= >| slapd[3012]: conn=33 op=3 SRCH base="ou=benchmark,o=avci,c=de" scope=1 >| deref=0 filter="(sn=test03*)" slapd[3012]: conn=33 op=4 UNBIND >| slapd[3012]: conn=33 op=3 SEARCH RESULT tag=101 err=0 nentries=100 text= >| slapd[3012]: conn=33 fd=18 closed > `---- > > ,----[ slapd.log ldapsearch ] >| slapd[3012]: conn=35 fd=18 ACCEPT from IP=127.0.0.1:20256 >| (IP=0.0.0.0:389) slapd[3012]: conn=35 op=0 BIND dn="" method=163 >| slapd[3012]: conn=35 op=0 RESULT tag=97 err=14 text=SASL(0): successful >| result: slapd[3012]: conn=35 op=1 BIND dn="" method=163 >| slapd[3012]: SASL [conn=35] Error: unable to open Berkeley db >| /etc/sasldb2: No such file or directory slapd[3012]: conn=35 op=1 BIND >| authcid="benchmark" authzid="benchmark" slapd[3012]: conn=35 op=1 BIND >| dn="cn=benchmark,o=avci,c=de" mech=DIGEST-MD5 sasl_ssf=128 ssf=128 >| slapd[3012]: conn=35 op=1 RESULT tag=97 err=0 text= >| slapd[3012]: conn=35 op=2 SRCH base="ou=benchmark,o=avci,c=de" scope=2 >| deref=0 filter="(sn=test03*)" slapd[3012]: conn=35 op=2 SRCH attr=* >| slapd[3012]: conn=35 op=3 UNBIND >| slapd[3012]: conn=35 op=2 SEARCH RESULT tag=101 err=0 nentries=100 text= >| slapd[3012]: conn=35 fd=18 closed > `---- Thanks, this is perfect. I've certainly iterated through hundreds of entries using Net::LDAPapi, so let me look over what's happening in ldapwalk.pl, maybe it's got a bug the way it is written. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration |