Searching groups on Novell LDAP servers

[<Sim...@wi...>]

Hi all,

      Having sorted out my binding problem (see previous posts, thanks to
      everyone for their help !), I now need to establish if my user is a member
      of a group.

      I've used Mark's ismember.pl script (from the distribution) but it always
      says that a user is not a member of a group, even when it is.

      Using the printmembers.pl script, I don't get any results. Looking at the
      trace on the server, the only result returned is the dn of the group
      itself.

      Question - Do I need to query in any unusual way to get the response I'm
      expecting ?

      I am using Perl 5.6.0, Net::LDAP 0.18 & Convert::ASN1 0.06 against a
      Novell NDS8 for NT server.

      Rgds,

      Simon Wilcox

      For the record, the server trace looks like this:

*** NDS Trace Utility - BEGIN Logging *** Tue May 30 21:19:12 2000
LDAP:  select activity
LDAP:  Accepting TCP connection
LDAP:  Starting new monitor thread
LDAP:  new connection on 0x5342af8
LDAP:  Monitor thread 0x7d4 started
LDAP:  listening for activity in monitor thread 0x7d4 on:
LDAP:      0x5342dd0r
LDAP:      0x5342af8r
LDAP:  before select in monitor thread 0x7d4, active_threads 0
LDAP:  select activity in monitor thread 0x7d4
LDAP:  read activity on 0x5342dd0
LDAP:  listening for activity in monitor thread 0x7d4 on:
LDAP:      0x5342dd0r
LDAP:      0x5342af8r
LDAP:  before select in monitor thread 0x7d4, active_threads 0
LDAP:  select activity in monitor thread 0x7d4
LDAP:  read activity on 0x5342af8
LDAP:  listening for activity in monitor thread 0x7d4 on:
LDAP:      0x5342dd0r
LDAP:      0x5342af8r
LDAP:  before select in monitor thread 0x7d4, active_threads 1
LDAP:  do_bind
LDAP:  bind: protocol version 2 dn () method 128
LDAP:  accepting NULL bind
LDAP:  send_ldap_result 0::
LDAP:  select activity in monitor thread 0x7d4
LDAP:  read activity on 0x5342af8
LDAP:  listening for activity in monitor thread 0x7d4 on:
LDAP:      0x5342dd0r
LDAP:      0x5342af8r
LDAP:  before select in monitor thread 0x7d4, active_threads 1
LDAP:  do_search
LDAP:  SRCH base "o=wl" scope 2 deref 2
LDAP:   sizelimit 0 timelimit 0 attrsonly 0
LDAP:  begin get_filter
LDAP:  AND
LDAP:  begin get_filter_list
LDAP:  begin get_filter
LDAP:  EQUALITY
LDAP:  begin get_filter
LDAP:  EQUALITY
LDAP:      filter: (&(cn=permstaff)(objectclass=groupOfUniqueNames))
LDAP:      attrs:
LDAP:      dn
LDAP:  => send_search_entry (cn=PermStaff,ou=Groups,o=wl)
LDAP:  send_ldap_result 0::
LDAP:  select activity in monitor thread 0x7d4
LDAP:  read activity on 0x5342af8
LDAP:  listening for activity in monitor thread 0x7d4 on:
LDAP:      0x5342dd0r
LDAP:      0x5342af8r
LDAP:  before select in monitor thread 0x7d4, active_threads 1
LDAP:  do_search
LDAP:  SRCH base "cn=PermStaff,ou=Groups,o=wl" scope 0 deref 2
LDAP:   sizelimit 0 timelimit 0 attrsonly 0
LDAP:  begin get_filter
LDAP:  PRESENT
LDAP:      filter: (objectclass=*)
LDAP:      attrs:
LDAP:      uniquemember
LDAP:      memberurl
LDAP:  Undefined LDAP attribute "memberurl"
LDAP:  => send_search_entry (cn=PermStaff,ou=Groups,o=wl)
LDAP:  send_ldap_result 0::
LDAP:  select activity in monitor thread 0x7d4
LDAP:  read activity on 0x5342af8
LDAP:  listening for activity in monitor thread 0x7d4 on:
LDAP:      0x5342dd0r
LDAP:      0x5342af8r
LDAP:  before select in monitor thread 0x7d4, active_threads 1
LDAP:  do_unbind
LDAP:  select activity in monitor thread 0x7d4
LDAP:  read activity on 0x5342dd0
LDAP:  listening for activity in monitor thread 0x7d4 on:
LDAP:      0x5342dd0r
LDAP:  close conn in close_connection 0x56ab9cc on skt 0x5342af8 from opid -1
LDAP:  called by "monitor_thread7"
LDAP:  freeing conn 0x56ab9cc at index 1 in monitor thread 0x584f008
LDAP:  before select in monitor thread 0x7d4, active_threads 0
*** NDS Trace Utility - END   Logging *** Tue May 30 21:19:20 2000