Re: (ITS#5296) Search netgroup by triple don't report existing entry

[hyc@symas.com]

rochette_jean-louis@emc.com wrote:
> Full_Name: Jean-Louis ROCHETTE
> Version: 2.3.39
> OS: Linux Fedora
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (152.62.109.163)
> 
> 
> Brief description of the problem
> --------------------------------
> Lookup of a netgroup by triple doesn't work in last stable release slapd 2.3.39,
> though it worked well with slapd 2.3.27.
> This looks like a regression in slapd.
> This should be easy to reproduce.
> The problem was first noticed in slapd 2.3.30.
> The lookup by triple succeeds with a iPlanet server.

There are no matching rules defined for nisNetgroupTriple in nis.schema. There 
have never been, since RFC2307 doesn't define any. As such, filtering by 
nisNetgroupTriple is totally undefined. Any server that returns your expected 
result using the search filter you provide is broken.

There is no regression here. Your distro vendor may have hacked their own 
schema files to provide one, that's an issue for you to discuss with your 
vendor. This ITS will be closed.
-- 
   -- Howard Chu
   Chief Architect, Symas Corp.  http://www.symas.com
   Director, Highland Sun        http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP     http://www.openldap.org/project/