ldapsearch weird results - wild card not working as expected

[Simon McGregor <smcgregor@domainagedcare.com.au>]

I wrote a script to add groups to my ldap directory

---------------------------------
#!/bin/sh

# Get the latest gid
gidlast="`ldapsearch -x "cn=*"  -b "ou=Group,dc=mydomain,dc=com" -h myserver |
grep gidNumber | awk '{ print $2 }' | sort -u | tail -n 1`"
newgid="`echo "$gidlast + 1" | bc`"

echo "newgid: $newgid"

# Make the Mods
echo "dn: cn=$1,ou=Group,dc=mydomain,dc=com" > /tmp/modify.ldap
echo "changetype: add"  >>   /tmp/modify.ldap
echo "objectClass: posixGroup"  >>   /tmp/modify.ldap
echo "objectClass: top"  >>   /tmp/modify.ldap
echo "cn: $1" >>   /tmp/modify.ldap
echo "gidNumber: $newgid" >>   /tmp/modify.ldap

# Run the Update
ldapmodify -x -f /tmp/modify.ldap -h myserver -D
cn=Manager,dc=mydomain,dc=com -w mypasswd

----------------------------------

This correctly creates a new group
eg.

./mkgroup.sh mygroup01

$ ldapsearch -x "cn=mygroup01" -h myserver

produces ->

# mygroup01, Group, mydomain.com
dn: cn=mygroup01,ou=Group,dc=mydomain,dc=com
objectClass: posixGroup
objectClass: top
cn: mygroup01
gidNumber: 7435
memberUid: dummyuser

The issue is the following:

$ ldapsearch -x "cn=mygroup*"  -b "ou=Group,dc=mydomain,dc=com" -h myserver |
grep gidNumber | awk '{ print $2 }' | sort -u | tail -n 1

returns the result
7435

$ ldapsearch -x "cn=*"  -b "ou=Group,dc=mydomain,dc=com" -h myserver | grep
gidNumber | awk '{ print $2 }' | sort -u | tail -n 1

returns the result
7434

In other words the wild card is not picking up the new group even though it is
actually there. Perhaps someone can show me the error of my ways but I think
both results should return the same value

I am running centos 5 with
openldap-clients-2.3.27-8.el5_2.4
openldap-servers-2.3.27-8.el5_2.4
openldap-2.3.27-8.el5_2.4
openldap-devel-2.3.27-8.el5_2.4





The information contained in this email and any attachments is strictly confidential. If you are not the intended recipient you must not disclose or use the information contained in it. If you have received this email in error please notify us immediately by return email and delete the document. Domain Principal Pty Ltd accepts no liability for any loss or damage caused by this email or its attachments due to viruses interference interception corruption or unauthorised access.