Re: Search subschemaSubentry with GSSAPI bind

[Quanah Gibson-Mount <quanah@stanford.edu>]

--On Tuesday, June 27, 2006 12:27 PM -0500 Ti Leggett 
<leggett@ci.uchicago.edu> wrote:

> I should also mention this is a RHEL 4 machine:
>
> [root@]# rpm -qa | grep openldap
> openldap-2.2.13-4
> openldap-clients-2.2.13-4
> openldap-servers-2.2.13-4


I would suggest contacting your vendor for support on this issue, as you 
are using a release branch that is no longer supported.  The current 
version of OpenLDAP is 2.3.24.

I will note that doing this search with GSSAPI works correctly for me with 
OpenLDAP 2.3.24.


tribes:~> ldapsearch -h ldap-uat -s base -b "cn=subschema" attributetypes | 
more
SASL/GSSAPI authentication started
SASL username: quanah@stanford.edu
SASL SSF: 56
SASL installing layers
# extended LDIF
#
# LDAPv3
# base <cn=subschema> with scope baseObject
# filter: (objectclass=*)
# requesting: attributetypes
#

# Subschema
dn: cn=Subschema
attributeTypes: ( 2.5.4.0 NAME 'objectClass' DESC 'RFC2256: object classes 
of
the entity' EQUALITY objectIdentifierMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.
38 )
attributeTypes: ( 2.5.21.9 NAME 'structuralObjectClass' DESC 'X.500(93): 
struc
tural object class of entry' EQUALITY objectIdentifierMatch SYNTAX 
1.3.6.1.4.
1.1466.115.121.1.38 SINGLE-VALUE NO-USER-MODIFICATION USAGE 
directoryOperatio
n )
attributeTypes: ( 2.5.18.1 NAME 'createTimestamp' DESC 'RFC2252: time which 
ob
ject was created' EQUALITY generalizedTimeMatch ORDERING 
generalizedTimeOrder
ingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE 
NO-USER-MODIFICATI
ON USAGE directoryOperation )
attributeTypes: ( 2.5.18.2 NAME 'modifyTimestamp' DESC 'RFC2252: time which 
ob
ject was last modified' EQUALITY generalizedTimeMatch ORDERING 
generalizedTim
eOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE 
NO-USER-MODI
FICATION USAGE directoryOperation )
attributeTypes: ( 2.5.18.3 NAME 'creatorsName' DESC 'RFC2252: name of 
creator'
 EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 
SINGLE-
VALUE NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 2.5.18.4 NAME 'modifiersName' DESC 'RFC2252: name of last 
mo
difier' EQUALITY distinguishedNameMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.12
SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 2.5.18.9 NAME 'hasSubordinates' DESC 'X.501: entry has 
child
ren' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 
SINGLE-VALUE N
O-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 2.5.18.10 NAME 'subschemaSubentry' DESC 'RFC2252: name of 
co
ntrolling subschema entry' EQUALITY distinguishedNameMatch SYNTAX 
1.3.6.1.4.1
.1466.115.121.1.12 SINGLE-VALUE NO-USER-MODIFICATION USAGE 
directoryOperation
 )
attributeTypes: ( 1.3.6.1.1.16.4 NAME 'entryUUID' DESC 'UUID of the entry' 
EQU
ALITY UUIDMatch ORDERING UUIDOrderingMatch SYNTAX 1.3.6.1.1.16.1 
SINGLE-VALUE
 NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.6 NAME 'altServer' DESC 
'RFC2252: a
lternative servers' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 USAGE 
dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.5 NAME 'namingContexts' DESC 
'RFC22
52: naming contexts' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 USAGE 
dSAOperation
)
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.13 NAME 'supportedControl' DESC 
'RF
C2252: supported controls' SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 USAGE 
dSAOper
ation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.7 NAME 'supportedExtension' DESC 
'R
FC2252: supported extended operations' SYNTAX 
1.3.6.1.4.1.1466.115.121.1.38 U
SAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.15 NAME 'supportedLDAPVersion' 
DESC
 'RFC2252: supported LDAP versions' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 
USAG

[snip]

--Quanah



--
Quanah Gibson-Mount
Principal Software Developer
ITS/Shared Application Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html