[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#7985) Recursive values



Full_Name: Oleg Belykh
Version: 2.4.40
OS: FreeBSD
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (37.99.40.12)


We are testing latest OpenLDAP 2.4.40 with mdb (FreeBSD 10) with our custom
schema and structure. 
Error details: request returns recursive values on some leaves. Some sensitive
values replaced with 'â?¦' Please check:
custom schema:
# Telephone Attributes
attributetype ( 1.3.6.1.4.1.4203.666.6273.2.1 NAME 'telephoneNumberAccessCode'
        DESC 'Access code for telephoneNumber services'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.4203.666.6273.2.2 NAME 'faxDeliveryMailbox'
        EQUALITY caseIgnoreIA5Match
        SUBSTR caseIgnoreIA5SubstringsMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )

attributetype ( 1.3.6.1.4.1.4203.666.6273.2.3 NAME 'voiceDeliveryMailbox'
        DESC 'Voice Mailbox'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.4203.666.6273.2.4 NAME 'phoneGroupName'
        DESC 'Telephone Group Name'D0D
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

objectclass ( 1.3.6.1.4.1.4203.666.6273.2.100 NAME 'telephoneNumberAccount'
        DESC 'Telephone account'
        SUP top STRUCTURAL
        MUST ( telephoneNumber )
        MAY ( userPassword $ telephoneNumberAccessCode $ macAddress $
faxDeliveryMailbox ) )

ldapsearch results:
root@sw:/lib/ldap # ldapsearch -H 'ldapi://%2fvar%2frun%2fopenldap%2fldapi/' -W
-b 'dc=â?¦' -D 'cn=ldroot,dc=â?¦'

Enter LDAP Password: 

# extended LDIF
#
# LDAPv3
# base <dc=â?¦> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# â?¦
dn: dc=â?¦
objectClass: dcObject
objectClass: organization
objectClass: top
dc: ...
o: ...

# accounts, â?¦
dn: ou=accounts,dc=â?¦
objectClass: top
objectClass: organizationalUnit
ou: accounts

# persons, accounts, â?¦
dn: ou=persons,ou=accounts,dc=â?¦
objectClass: organizationalUnit
ou: persons

# kerberos, accounts, â?¦
dn: ou=kerberos,ou=accounts,dc=â?¦
objectClass: organizaonalalUnit
ou: kerberos

# mails, accounts, â?¦
dn: ou=mails,ou=accounts,dc=â?¦
objectClass: organizationalUnit
ou: mails

# phones, accounts, â?¦
dn: ou=phones,ou=accounts,dc=â?¦
objectClass: organizationalUnit
ou: phones

# groups, â?¦
dn: ou=groups,dc=â?¦
objectClass: top
objectClass: organizationalUnit
ou: groups

# userGroups, groups, â?¦
dn: ou=userGroups,ou=groups,dc=â?¦
objectClass: organizationalUnit
ou: usergroups

# phoneGroups, groups, â?¦
dn: ou=phoneGroups,ou=groups,dc>2E2?¦
objectClass: organizationalUnit
ou: phonegroups

# computers, â?¦
dn: ou=computers,dc=â?¦
objectClass: top
objectClass: organizationalUnit
ou: computers

# services, â?¦
dn: ou=services,dc=â?¦
objectClass: top
objectClass: organizationalUnit
ou: services

# manager, accounts, â?¦
dn: uid=manager,ou=accounts,dc=â?¦
objectClass: account
objectClass: simpleSecurityObject
uid: manager
userPassword:: ...

# freeswitch, accounts, â?¦
dn: uid=freeswitch,ou=accounts,dc=â?¦
objectClass: account
objectClass: simpleSecurityObject
uid: freeswitch
userPassword:: ...

# admins, userGroups, groups, â?¦
dn: cn=admins,ou=userGroups,ou=groups,dc=â?¦
objectClass: posixGroup
cn: admins
gidNumber: 10000
description: Group account
memberUid: ...

# users, userGroups, groups, â?¦
dn: cn=users,ou=userGroups,ou=groups,dc=â?¦
objectClass: posixGroup
cn: users
gidNumber: 10001
description: Group account

# ..., persons, accounts, â?¦
dn: uid=...,ou=persons,ou=accounts,dc=2%2?¦
objectClass: posixAccount
objectClass: top
objectClass: inetOrgPerson
gidNumber: 10000
givenName: ...
initials: v
sn: ..
displayName: ...
uid: ...
homeDirectory: /dev/null
loginShell: /bin/sh
cn: ...
uidNumber: 20107
userPassword:: ...
telephoneNumber: 2020


( !!!! )

# 1000, phones, accounts, â?¦
dn: telephoneNumber=1000,ou=phones,ou=accounts,dc=â?¦
telephoneNumber: 1000
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 2020, phones, accounts, â?¦
dn: telephoneNumber=2020,ou=phones,ou=accounts,dc=â?¦
telephoneNumber: 2020
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 2020, phones, accounts, â?¦
dn: telephoneNumber=1000,telephonumumber=2020,ou=phones,ou=accounts,dc=...
telephoneNumber: 1000
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 1000, 2020, phones, accounts, â?¦
dn: telephoneNumber=1000,telephoneNumber=0000,telephoneNumber=2020,ou=phones,o
 u=accounts,dc=â?¦
telephoneNumber: 1000
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 1000, 1000, 2020, phones, accounts, â?¦
dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu
 mber=2020,ou=phones,ou=accounts,dc=â?¦
telephoneNumber: 1000
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 1000, 1000, 1000, 2020, phones, accounts, â080¦
dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu
 mber=1000,telephoneNumber=2020,ou=phones,ou=accounts,dc=â?¦
telephoneNumber: 1000
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 1000, 1000% 1 1000, 1000, 2020, phones, accounts, â?¦
dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu
 mber=1000,telephoneNumber=1000,telephoneNumber=2020,ou=phones,ou=accounts,dc=...
telephoneNumber: 1000
telephoneNumberAccessCode:86864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 1000, 1000, 1000, 1000, 1000, 2020, phones, accounts, â?¦
dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu
 mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=2020,ou=p
 hones,ou=accounts,dc=â?¦
telephoneNumber: 1000
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 1000, 1000, 1000, 1000, 1000, 1000, 2020, phones, accounts, â?¦
dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu
 mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,tele
 phoneNumber=2020,ou=phones,ou=accounts,dc=â?¦
telephoneNumber: 1000
telephoneNumberAccessCode: 64%0
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000, 2020, phones, accounts, time.
 kz
dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu
 mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,tele
 phoneNumber=1000,telephoneNumber=2020,ou=phones,ou=accounts,dc=â?¦
telephoneNumber: 1000
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000, 2020, phones, accounts,
  â?¦
dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu
 mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,tele
 phoneNumber=1000,telephoneNumber=1000,telephoneNumber=2020,ou=phones,ou=accou
 nts,dc=â?¦
telephoneNumber: 1000
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.

# 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000!01000, 2020, phones, acc
 ounts, â?¦
dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu
 mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,tele
 phoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=20
 20,ou=phones,ou=accounts,dc=â?¦
telephoneNumber: 1000
telephoneNumberAccessCode: 8864
objectClass: telephoneNumberAccount
userPassword:: â?¦.


if you need screenshots from some ldap management utils, please mail me.