Hi, I am sending this to the list before filing a bug, because I am not 100% sure if this is not a misconfiguration item, anyway: I encountered a very strange bug, which actually broke my whole system: after modifying the index lines in slapd.conf, lookups by different services failed. ldapsearch '(uid=some-uid)' didnt return the entry, while ldapsearch '(uid=some-uid*)' did return exactly the dn: uid=some-uid,ou=... entry. I found out that this behaviour shows up when maintaining index objectClass eq even though I cant think of _any_ reason why an objectClass index would crash a lookup on uids. my index lines: # Indices to maintain index default pres,eq index uid,uidNumber,rid index cn,sn eq,pres,sub #index objectClass ^^^ if I uncomment this, the above described effect shows up Any clue? Since the documentation explicitly encourages one to maintain the objectClass eq index, I dont think this is a misconfiguration issue (I hope so..) regards Markus find my slapd.conf below: ------- argentum LDAP # egrep ^[^#].* /etc/openldap/slapd.conf include /etc/openldap/schema/core.schema include /etc/openldap/schema/corba.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/java.schema include /etc/openldap/schema/krb5-kdc.schema include /etc/openldap/schema/misc.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/openldap.schema include /etc/openldap/schema/puli.schema include /etc/openldap/schema/samba.schema password-hash {crypt} TLSCertificateFile /etc/ssl/certs/ldap/ldap.cert.pem TLSCertificateKeyFile /etc/ssl/certs/ldap/ldap.key.pem TLSCACertificateFile /etc/ssl/mrmadcowCA/cacert.pem pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args access to attribute=userPassword by dn="cn=Manager,o=mrmadcow" write by anonymous auth by self write by * none access to attrs=lmPassword,ntPassword by dn="cn=sambaadmin,o=mrmadcow" write by dn="cn=Manager,o=mrmadcow" write by self write by * none access to * by dn="cn=Manager,o=mrmadcow" write by dn="cn=sambaadmin,o=mrmadcow" write by self write by * read database ldbm suffix "o=mrmadcow" rootdn "cn=Manager,o=mrmadcow" directory /var/lib/openldap-ldbm index default pres,eq index uid,uidNumber,rid index cn,sn eq,pres,sub -- ___________________________________ ( Markus Rippl, markus.rippl@gmx.de ) ( This email has Super Cow Powers. ) ----------------------------------- o ^__^ o (..)\_______ (__)\ )\/\ ||----w | || ||
Attachment:
pgppbMfes3XTd.pgp
Description: signature