[Date Prev][Date Next] [Chronological] [Thread] [Top]

lesser access



I have done the same search with ldapsearch and Netscape.

log output from Netscape:

conn=10 fd=8 connection from unknown (208.11.81.62) accepted.
conn=10 op=0 BIND dn="MAIL=JCHIODI@AMSITE.COM,DC=AMSITE,DC=COM" method=128
conn=10 op=0 RESULT err=0 tag=97 nentries=0
conn=10 op=1 SRCH base="DC=AMSITE,DC=COM" scope=2 filter="(cn=*LIS*)"
conn=10 op=1 RESULT err=0 tag=101 nentries=4
conn=10 op=-1 fd=8 closed errno=104
conn=10 op=2 UNBIND

log output from ldapsearch

conn=11 fd=8 connection from localhost (127.0.0.1) accepted.
conn=11 op=0 BIND dn="MAIL=JCHIODI@AMSITE.COM,DC=AMSITE,DC=COM" method=128
conn=11 op=0 RESULT err=0 tag=97 nentries=0
conn=11 op=1 SRCH base="DC=AMSITE,DC=COM" scope=2 filter="(cn=*LIS*)"
conn=11 op=-1 fd=8 closed errno=0
conn=11 op=1 RESULT err=0 tag=101 nentries=4
conn=11 op=2 UNBIND

So how do they differ?  Well other than where they connect from, it is the
below line.

Netscape:

conn=10 op=-1 fd=8 closed errno=104

ldapsearch:

conn=11 op=-1 fd=8 closed errno=0

This line looks like an exit line.  Netscape giving an error number of
104 and ldapsearch an error number of 0.  So what does an error number
of 104 indicate?  

here is my access lines again (they are different then the last
message)

default none

access to dn=".*,ou=Roaming,dc=amsite,dc=com" by dnattr=owner write

access to attr=owner
        by * read

access to attr=entry
        by self write
        by dnattr=owner write
        by dn=".+" read
        by * read

access to attr=cn,givenName,sn,mail
        by self write
        by dnattr=owner write
        by dn=".+" read
        by * search

access to
attr=uid,objectclass,creatorsname,modifiersname,createtimestamp,modifytimestamp
        by self read
        by * search

access to attr=userpassword
        by self write
        by dnattr=owner write
        by * none

access to *
        by self write
        by dnattr=owner write
        by dn=".+" read
        by * none


___________________

Jt "The Squeegy" Chiodi

http://www.squeegy.org/
squeegy@squeegy.org