(ITS#6217) proxycache not returning cached data

[w.van.keulen@few.vu.nl]

Full_Name: Jim van Keulen
Version: 2.4.16
OS: Solaris 9
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (130.37.192.24)


Using openldap-2.4.16 proxcache to search a SUN Directory Server for user data,
a query identified by the proxycache server to be CACHEABLE and ANSWERABLE does
not return data. For some users (uid's) the data is returned, while not for
others. 

Config:

database        ldap
suffix          "dc=few,dc=vu,dc=nl"
rootdn          cn=Manager,dc=few,dc=vu,dc=nl
rootpw          secret

tls start
uri             ldap://klondike.few.vu.nl
acl-bind        bindmethod=simple
        binddn="cn=sambaLdapManager,ou=Special Users,dc=few,dc=vu,dc=nl"
        credentials="xxx"

sizelimit       unlimited

overlay         pcache
proxycache      bdb 100000 10 1000 100

proxyAttrset    0 gidNumber sambaSID sambaGroupType sambaSIDList description
displayName cn objectClass uid uidNumber homeDirectory sambaPwdLastSet
sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime
sambaKickoffTime sn sambaHomeDrive sambaHomePath sambaLogonScript
sambaProfilePath sambaUserWorkstations sambaSID sambaPrimaryGroupSID
sambaDomainName sambaAcctFlagssambaMungedDial sambaBadPasswordCount
sambaBadPasswordTime sambaPasswordHistory modifyTimestamp sambaLogonHours
modifyTimestamp sambaMaxPwdAge sambaPwdHistoryLength memberUid

proxyTemplate   (&(objectClass=)(uid=)) 0 1800

cachesize       10000
directory       /var/opt/openldap/openldap-data/proxy
access to * by * write

index objectclass eq
index cn pres,sub,eq
index sn pres,sub,eq

End Config

I query with
 ldapsearch -x -h flits '(&(objectClass=sambaSamAccount)(uid=????))' uid

This returns data when e.g. uid=jim, but not when e.g. uid=hbokman. I have no
clue why it works for some users, but not for others. When I query the first
time
I get the requested data from the proxied server fine. It is cached, but not
always
retrieved. 

ldapsearch -x -h flits '(&(objectClass=sambaSamAccount)(uid=jim))' uid
# extended LDIF
#
# LDAPv3
# base <> with scope subtree
# filter: (&(objectClass=sambaSamAccount)(uid=jim))
# requesting: uid 
#

# jim, People, few.vu.nl
dn: uid=jim,ou=People,dc=few,dc=vu,dc=nl
uid: jim

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

**** output from slapd -d4096 for query ******
query template of incoming query = (&(objectClass=)(uid=))
Entering QC, querystr = (&(objectClass=sambaSamAccount)(uid=jim))
Lock QC index = 31f738
QUERY ANSWERABLE

**************************************


ldapsearch -x -h flits '(&(objectClass=sambaSamAccount)(uid=hbokman))' uid
# extended LDIF
#
# LDAPv3
# base <> with scope subtree
# filter: (&(objectClass=sambaSamAccount)(uid=hbokman))
# requesting: uid 
#

# search result
search: 2
result: 0 Success

# numResponses: 1

****** output form slapd -d4096 for query ******

query template of incoming query = (&(objectClass=)(uid=))
Entering QC, querystr = (&(objectClass=sambaSamAccount)(uid=hbokman))
Lock QC index = 31f738
QUERY ANSWERABLE

***************************************