[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Proxy can answer but provides no data
Hey there :-)
I have some problems using OpenLDAP as proxy-cache.
I have set up different LDAP-Servers on my laptop (SuSE 9.1, using the
provided OL-RPM-packages v. 2.2.6), listening to different ports. One of
them is set up as proxy. The corresponding slapd.conf looks this way:
[...]
backend ldap
database ldap
suffix "dc=example2,dc=com"
uri ldap://localhost:60002/dc=example2,dc=com
rootdn "cn=Manager"
overlay proxycache
proxycache bdb 100000 2 1000 1000
proxyAttrset 0 uid loginShell uidNumber gidNumber homeDirectory
shadowExpire cn
proxyAttrset 1 uidNumber
proxyTemplate (uid=) 0 3600
proxyTemplate (uid=) 1 3600
cachesize 200
directory /var/lib/ldap3
[...]
When submitting
ldapsearch -x -b "dc=example2,dc=com" -LLL -h localhost:60003
"uid=User40004" uidNumber
I receive the desired results. Moreover, my logfile shows the following
lines:
Nov 29 21:18:07 linux slapd[2669]: QUERY NOT ANSWERABLE
Nov 29 21:18:07 linux slapd[2669]: QUERY CACHEABLE
Nov 29 21:18:07 linux slapd[2669]: [rw] searchBase: "dc=example2,dc=com"
-> "dc=example2,dc=com"
Nov 29 21:18:08 linux slapd[2669]: [rw] searchResult:
"uid=User40004,ou=massuser,dc=example2,dc=com" -> "uid=User40004,ou=ma
ssuser,dc=example2,dc=com"
Nov 29 21:18:08 linux slapd[2669]: send_ldap_result: err=32 matched=""
text=""
Nov 29 21:18:08 linux slapd[2669]: UUID for query being added =
877cbeae-d68f-1028-950b-8ab00c3da08a
Nov 29 21:18:08 linux slapd[2669]: ==> bdb_add:
uid=User40004,ou=massuser,dc=example2,dc=com
Seems nice, at least I thought so.
Submitting the same search again, I expected to have it answered by the
ldap-proxy. In fact, the logfile shows
Nov 29 21:36:35 linux slapd[2669]: QUERY ANSWERABLE
Nov 29 21:36:35 linux slapd[2669]: bdb_idl_fetch_key: [b49d1940]
Nov 29 21:36:35 linux slapd[2669]: <= bdb_equality_candidates: (uid)
index_param failed (18)
Nov 29 21:36:35 linux slapd[2669]: send_ldap_result: err=0 matched=""
text=""
Nov 29 21:36:35 linux slapd[2669]: connection_get(9)
Seems nice again, but ldapsearch does not show any result and no
error-message es well.
Since it is the same when using a self-compiled OL-2.2.17 and the
meta-backend, it seems to me that this may be a general problem or that
simply, there is something absolutely obvious that I am still missing.
Maybe, somebody can already help me ... of course I will provide more
detailed logs if necessary.
Thanks in advance
Thilo
--
Geschenkt: 3 Monate GMX ProMail + 3 Top-Spielfilme auf DVD
++ Jetzt kostenlos testen http://www.gmx.net/de/go/mail ++