Re: Problems with 2.0.11

[Patrick von der Hagen <hagen@ira.uka.de>]

On Thu, Jul 12, 2001 at 06:52:56PM +0200, Patrick von der Hagen wrote:
The speed problem is solved now, but the other one remains. :-(

[...]
> defaultaccess none
> access to dn="(.*,)?ou=Mail,dc=ira,dc=uka,dc=de" by domain=studsun1.ira.uka.de read
> I get no response when I use those two lines, but everything works fine
> if I comment out the access-line and set default-access to read. So the
> lookup as such is fine. But why won't this access-directive work?
Additional log-information: (loglevel=1000)
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 293980 local4.debug] daemon: conn=0 fd=7 connection from IP=129.13.10.5:54986 (IP=:: 389) accepted.
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 732783 local4.debug] daemon: added 7r
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 802679 local4.debug] daemon: activity on:
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 100000 local4.debug] 
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 538834 local4.debug] daemon: select: listen=6 active_threads=0 tvp=NULL
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 454241 local4.debug] daemon: activity on 1 descriptors
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 802679 local4.debug] daemon: activity on:
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 522297 local4.debug]  7r
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 100000 local4.debug] 
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 694296 local4.debug] daemon: read activity on 7
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 149773 local4.debug] conn=0 op=0 BIND dn="" method=128
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 538834 local4.debug] daemon: select: listen=6 active_threads=1 tvp=NULL
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 923667 local4.debug] conn=0 op=0 RESULT tag=97 err=0 text=
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 454241 local4.debug] daemon: activity on 1 descriptors
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 802679 local4.debug] daemon: activity on:
[...]
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 694296 local4.debug] daemon: read activity on 7
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 538834 local4.debug] daemon: select: listen=6 active_threads=1 tvp=NULL
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 119476 local4.debug] begin get_filter
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 873669 local4.debug] PRESENT
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 274773 local4.debug] end get_filter 0
[...]
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 562165 local4.debug] conn=0 op=1 SRCH base="cn=s_hagen,ou=mail,dc=ira,dc=uka,dc=de" scope=0 filter="(objectClass=*)"
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 344839 local4.debug] => test_filter
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 657793 local4.debug]     PRESENT
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 923158 local4.debug] => access_allowed: search access to "cn=s_hagen,ou=mail,dc=ira,dc=uka,dc=de" "objectClass" requested
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 967793 local4.debug] => acl_get: [1] check attr objectClass
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 155642 local4.debug] <= acl_get: [1] acl cn=s_hagen,ou=mail,dc=ira,dc=uka,dc=de attr: objectClass
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 971074 local4.debug] => acl_mask: access to entry "cn=s_hagen,ou=mail,dc=ira,dc=uka,dc=de", attr "objectClass" requested
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 488679 local4.debug] => acl_mask: to all values by "", (=n) 
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 596861 local4.debug] <= check a_domain_pat: irams1.ira.uka.de
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 596861 local4.debug] <= check a_domain_pat: localhost
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 596861 local4.debug] <= check a_domain_pat: irams1
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 315582 local4.debug] <= acl_mask: no more <who> clauses, returning =n (stop)
Jul 13 16:25:03 irams1.ira.uka.de slapd[28936]: [ID 384072 local4.debug] => access_allowed: search access denied by =n

-- 
CU,
   Patrick.