Re: python-ldap, Zope, and NDS

[Michael <mi...@st...>]

Timothy Wilson wrote:
> 
> On Sat, 24 Jun 2000, David Leonard wrote:
> 
> > How did it go? Did Michael's answer help?
> 
> I took Michael's advice, but it didn't change anything.

Does one-level browsing with web2ldap work?

> It turns out that the bug I found (wherever its source) only manifests
> itself when I use the 'browse' feature of Jeffrey Shell's ZLDAPConnection
> product for Zope.

I don't know this module. If you reimplement one-level browsing in a
primitive test program and it works you have to dig into
ZLDAPConnection. Do you have any debugging messages in your server
logs? It would be helpful to observe the DNs, scope and search
filter it receives.

> > If it didn't then the problem may lie somewhere in the LDAP C library,
> > since python is simply reporting the errors that it finds.  Are you using
> > OpenLDAP, or solaris or netscape's ldap or...?
> 
> I suspect that the problem is a result of a bug in the LDAP C library as 
> you
> suggest or a case of < 100% compliance to the ldap standard on the part of
> Novell's NDS.

I'm not really sure that this is a bug in the OpenLDAP lib. I
experienced exactly the same error when doing LDAP-queries with
postfix-MTA (build with OpenLDAP libs) against a Lotus Domino
server. But browsing and searching this server with web2ldap
(python-ldap build with OpenLDAP lib) works just fine except some
strange things Domino is doing (e.g. case-sensitive mail
attributes). IMHO you have to take care about canonifying the DN.
There are e.g. some strange things with LDAPv2- and LDAPv3-DN
conversion.

Ciao, Michael.

P.S.: Please, let's stay on the mailing list with this discussion.