Re: [net-ldapapi-software] ldapwalk.pl errors

[Quanah Gibson-M. <qu...@zi...>]

--On Thursday, September 18, 2008 8:36 PM +0200 Dieter Kluenter 
<di...@dk...> wrote:

> Quanah Gibson-Mount <qu...@zi...> writes:
>
>> --On Thursday, September 18, 2008 10:29 AM -0700 Quanah Gibson-Mount
>> <qu...@zi...> wrote:
>>
>>> --On Thursday, September 18, 2008 11:36 AM +0200 Dieter Kluenter
>>> <di...@dk...> wrote:
>>>
>>>> ep 17 19:29:11 rubin slapd[3052]: conn=19 op=0 BIND
>>>> dn="cn=benchmark,o=avci,c=de" mech=SIMPLE ssf=0 Sep 17 19:29:11 rubin
>>>> slapd[3052]: => bdb_entry_get: found entry: "cn=benchmark,o=avci,c=de"
>>>> Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=0 RESULT tag=97 err=0
>>>> text= Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=1 SRCH
>>>> base="ou=benchmark,o=avci,c=de" scope=1 deref=0 filter="(sn=test03*)"
>>>> Sep 17 19:29:11 rubin slapd[3052]: conn=19 op=1 SRCH attr=mail
>>>> telephonenumber Sep 17 19:29:11 rubin slapd[3052]: => access_allowed:
>>>> search access to "ou=benchmark,o=avci,c=de" "entry" requested
>>>
>>>
>>> I suggest you alter your scope.
>>
>> Hm, although I guess that depends if your entries are all there on
>> that level (which works fine for me).
>>
>> Can you get me the entire log of that particular connection, from bind
>> to unbind?  Same for doing the same search via ldapsearch using the
>> same identity & filter, so I can compare the two.
>
> OK, here they are. although no visible difference. I have written a
> small script that adopts most lines of ldapwalk but it works for me. If
> you are interested let me know and I will mail it. I think the main
> problem of ldapwalk is in the part beginning with 'Cycle Through
> Entries', but I could not trace it down.
>
> ,----[ slapd.log ldapwalk.pl ]
>| slapd[3012]: conn=33 fd=18 ACCEPT from IP=127.0.0.1:15713
>| (IP=0.0.0.0:389) slapd[3012]: conn=33 op=0 SRCH base="" scope=0 deref=0
>| filter="(objectClass=*)" slapd[3012]: conn=33 op=0 SRCH
>| attr=supportedSASLMechanisms
>| slapd[3012]: conn=33 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
>| slapd[3012]: conn=33 op=1 BIND dn="" method=163
>| slapd[3012]: conn=33 op=1 RESULT tag=97 err=14 text=SASL(0): successful
>| result:  slapd[3012]: conn=33 op=2 BIND dn="" method=163
>| slapd[3012]: SASL [conn=33] Error: unable to open Berkeley db
>| /etc/sasldb2: No such file or directory slapd[3012]: conn=33 op=2 BIND
>| authcid="benchmark" authzid="benchmark" slapd[3012]: conn=33 op=2 BIND
>| dn="cn=benchmark,o=avci,c=de" mech=DIGEST-MD5 sasl_ssf=128 ssf=128
>| slapd[3012]: conn=33 op=2 RESULT tag=97 err=0 text=
>| slapd[3012]: conn=33 op=3 SRCH base="ou=benchmark,o=avci,c=de" scope=1
>| deref=0 filter="(sn=test03*)" slapd[3012]: conn=33 op=4 UNBIND
>| slapd[3012]: conn=33 op=3 SEARCH RESULT tag=101 err=0 nentries=100 text=
>| slapd[3012]: conn=33 fd=18 closed
> `----
>
> ,----[ slapd.log ldapsearch ]
>| slapd[3012]: conn=35 fd=18 ACCEPT from IP=127.0.0.1:20256
>| (IP=0.0.0.0:389) slapd[3012]: conn=35 op=0 BIND dn="" method=163
>| slapd[3012]: conn=35 op=0 RESULT tag=97 err=14 text=SASL(0): successful
>| result:  slapd[3012]: conn=35 op=1 BIND dn="" method=163
>| slapd[3012]: SASL [conn=35] Error: unable to open Berkeley db
>| /etc/sasldb2: No such file or directory slapd[3012]: conn=35 op=1 BIND
>| authcid="benchmark" authzid="benchmark" slapd[3012]: conn=35 op=1 BIND
>| dn="cn=benchmark,o=avci,c=de" mech=DIGEST-MD5 sasl_ssf=128 ssf=128
>| slapd[3012]: conn=35 op=1 RESULT tag=97 err=0 text=
>| slapd[3012]: conn=35 op=2 SRCH base="ou=benchmark,o=avci,c=de" scope=2
>| deref=0 filter="(sn=test03*)" slapd[3012]: conn=35 op=2 SRCH attr=*
>| slapd[3012]: conn=35 op=3 UNBIND
>| slapd[3012]: conn=35 op=2 SEARCH RESULT tag=101 err=0 nentries=100 text=
>| slapd[3012]: conn=35 fd=18 closed
> `----

Thanks, this is perfect.  I've certainly iterated through hundreds of 
entries using Net::LDAPapi, so let me look over what's happening in 
ldapwalk.pl, maybe it's got a bug the way it is written.

--Quanah


--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration