ldap and netscape addressbook

[Norbert Pabiś <npabis@e-point.pl>]

I have the following situation:

ldap.cong: DEREF = always

I directory I have entries from JNDI Tutorial.
Among them:
dn: ou=Staff,o=JNDITutorial
objectClass: top
objectClass: alias
objectClass: organizationalUnit
aliasedObjectName: ou=People,o=JNDITutorial
ou: Staff

and 
dn: ou=People,o=JNDITutorial
objectClass: top
objectClass: organizationalUnit
aliasedObjectName: ou=People,o=JNDITutorial
ou: People

When I do:
ldapsearch -x -b"ou=Staff,o=JNDITutorial" "(objectclass=cn)"
I get in ldap logs:
Mar 18 20:30:37 ubik slapd[1181]: daemon: conn=1 fd=9 connection from
IP=127.0.0.1:32867 (IP=0.0.0.1:32866 (IP=0.0.0.0:34049) accepted.
Mar 18 20:30:37 ubik slapd[1183]: conn=1 op=0 BIND dn="" method=128
Mar 18 20:30:37 ubik slapd[1183]: conn=1 op=0 RESULT tag=97 err=0 text=
Mar 18 20:30:37 ubik slapd[1184]: conn=1 op=1 SRCH
base="ou=staff,o=JNDITutorial" scope=2 filter="(cn=*)"
Mar 18 20:30:37 ubik slapd[1184]: conn=1 op=1 ENTRY dn="cn=Ted Geisel,
ou=People, o=JNDITutorial"
Mar 18 20:30:37 ubik slapd[1184]: conn=1 op=1 ENTRY dn="cn=Jon Ruiz,
ou=People, o=JNDITutorial"
... and several more
Mar 18 20:30:37 ubik slapd[1184]: conn=1 op=1 SEARCH RESULT tag=101
err=0  text= 
Mar 18 20:30:37 ubik slapd[1183]: conn=1 op=2 UNBIND 
Mar 18 20:30:37 ubik slapd[1183]: conn=-1 fd=9 closed 

Great, dereferencing works, just fine.
The problem is that in netscape after configuring directory to
ou=Staff,o=JNDITutorial
I get no entries but logs look like this:
Mar 18 20:29:49 ubik slapd[1181]: daemon: conn=0 fd=9 connection from
IP=127.0.0.1:32866 (IP=0.0.0.1:32866 (IP=0.0.0.0:34049) accepted.
Mar 18 20:29:49 ubik slapd[1183]: conn=0 op=0 BIND dn="" method=128 
Mar 18 20:29:49 ubik slapd[1183]: conn=0 op=0 RESULT tag=97 err=0 text= 
Mar 18 20:29:49 ubik slapd[1183]: conn=0 op=1 SRCH
base="ou=staff,o=JNDITutorial" scope=2 filter="(cn=*)"
Mar 18 20:29:49 ubik slapd[1183]: conn=0 op=1 SEARCH RESULT tag=101
err=0 text= 
Mar 18 20:29:49 ubik slapd[1184]: conn=0 op=2 UNBIND 
Mar 18 20:29:49 ubik slapd[1184]: conn=-1 fd=9 closed 

So it looks like the query is the same as from ldapsearch above.

Where is the difference?
This should not be related to netscape because alias dereferencing is
set to 'always'.


-- 
Norbert Pabiś