RE: referrals

[Igor Brezac <igor@ipass.net>]

On Wed, 5 May 2004, Pierangelo Masarati wrote:

> > I setup overlay chain as described above, but I it does not work me.
> > Both slave and master DIT are the same.  The master ldap server is not
> > receiving any connection attempts from the slave.  ldapmodify on the
> > slave returns a referral url.  It appears that the overalay is not used.
> >
> > $ ldapmodify -H ldap:/// -f ./i
> > SASL/DIGEST-MD5 authentication started
> > Please enter your password:
> > SASL username: igor
> > SASL SSF: 128
> > SASL installing layers
> > modifying entry "associatedDomain=ipass.net+cn=igor,ou=People,o=pb"
> > ldap_modify: Referral (10)
> >         referrals:
> > ldaps://jupiter.ipass.net/associatedDomain=ipass.net+cn=igor,ou=People,o=pb
> >
> > Any ideas?  (I use 2.2.11 and back-ldap is compiled in)
>
> Can you show logs from the slave?
>

I hope this will help you.  I used slapd -d 7.  I removed some things from this
log such as ber_flush, sasl_read and ldap_(read|write) lines from this output.

SASL Canonicalize [conn=1]: authzid="admin"
SASL proxy authorize [conn=1]: authcid="admin" authzid="admin"
SASL Authorize [conn=1]:  proxy authorization allowed
send_ldap_sasl: err=0 len=40
send_ldap_response: msgid=3 tag=97 err=0
<== slap_sasl_bind: rc=0
do_bind: SASL/DIGEST-MD5 bind: dn="cn=admin,ou=people,ou=admin,o=pb" ssf=128
connection_get(14)
connection_get(14): got connid=1
connection_read(14): checking for input on id=1
ldap_pvt_sasl_install
ber_get_next
ber_get_next: tag 0x30 len 88 contents:
ber_get_next
sasl_read: want=4 error=Resource temporarily unavailable
ldap_read: want=8 error=Resource temporarily unavailable
ber_get_next on fd 14 failed errno=11 (Resource temporarily unavailable)
do_modify
ber_scanf fmt ({m) ber:
do_modify: dn (associatedDomain=ipass.net+cn=igor,ou=People,o=pb)
ber_scanf fmt ({i{m[W]}}) ber:
>>> dnPrettyNormal: <associatedDomain=ipass.net+cn=igor,ou=People,o=pb>
=> ldap_bv2dn(associatedDomain=ipass.net+cn=igor,ou=People,o=pb,0)
<= ldap_bv2dn(associatedDomain=ipass.net+cn=igor,ou=People,o=pb,0)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(associatedDomain=ipass.net+cn=igor,ou=People,o=pb,272)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(associatedDomain=ipass.net+cn=igor,ou=people,o=pb,272)=0
<<< dnPrettyNormal: <associatedDomain=ipass.net+cn=igor,ou=People,o=pb>, <associatedDomain=ipass.net+cn=igor,ou=people,o=pb>
modifications:
        replace: userPassword
                one value, length 4
bdb_dn2entry("associatedDomain=ipass.net+cn=igor,ou=people,o=pb")
=> bdb_dn2id( "ou=people,o=pb" )
<= bdb_dn2id: got id=0x00000003
=> bdb_dn2id( "associatedDomain=ipass.net+cn=igor,ou=people,o=pb" )
<= bdb_dn2id: got id=0x00005d03
entry_decode: "associatedDomain=ipass.net+cn=igor,ou=People,o=pb"
<= entry_decode(associatedDomain=ipass.net+cn=igor,ou=People,o=pb)
ldap_url_parse_ext(ldaps://jupiter.ipass.net)
send_ldap_result: conn=1 op=3 p=3
send_ldap_result: err=10 matched="" text=""
send_ldap_result: referral="ldaps://jupiter.ipass.net/associatedDomain=ipass.net+cn=igor,ou=People,o=pb"
send_ldap_response: msgid=4 tag=103 err=10
send_ldap_response: ref="ldaps://jupiter.ipass.net/associatedDomain=ipass.net+cn=igor,ou=People,o=pb"
connection_get(14)
connection_get(14): got connid=1
connection_read(14): checking for input on id=1
ber_get_next
ber_get_next: tag 0x30 len 5 contents:
ber_get_next
sasl_read: want=4 error=Resource temporarily unavailable
ldap_read: want=8 error=Resource temporarily unavailable
ber_get_next on fd 14 failed errno=11 (Resource temporarily unavailable)
do_unbind


-- 
Igor