Re: Problem binding two naming contexts

[Pierangelo Masarati <ando@sys-net.it>]

On Wed, 2005-11-23 at 13:52 +0100, Jan-Piet Mens wrote:
> On Wed Nov 23 2005 at 11:49:33 CET, Pierangelo Masarati wrote:
> 
> > In your very case:
> > 
> > <slapd.conf>
> > database	bdb
> > suffix		"o=RSC"
> > 
> > database	meta
> > suffix		"dc=virtual"
> > # ... uri #0
> > uri		"ldap://localhost/ou=People,dc=virtual";
> > suffixmassage	"ou=People,dc=virtual" "ou=People,dc=retail"
> > # ... uri #1
> > uri		"ldap://localhost/dc=virtual";
> > suffixmassage	"dc=virtual" "o=RSC"
> > </slapd.conf>
> > 
> 
> Thank you! That worked. I notice that binds on
> uid=xx,ou=rsc,dc=virtual always work (i.e. they don't seem to be
> checked on the target server); is that correct and/or can it
> be changed?

No, it's not.  Please make sure you're not missing anything, post the
logs (at "stats") of the remote and the proxy servers.  If the problem
is confirmed, you should file an ITS.

> 
> Furthermore, upon searching for sn=mens for example, only the 
> results from the first URI are returned. Can that be changed
> to include all results of all uri?

All should.  Again, please post logs for both the remote server and the
proxy (now at "stats" + "stats2").

> 
> > As I said in my previous posting, you may still use gluing for a totally
> > different setup this way:
> > 
> > <slapd.conf>
> > # global overlay: goes before any database
> > overlay			rwm
> > rwm-suffixmassage	"ou=People,o=RSC" "ou=People,dc=retail"
> > 
> > # first database: proxy for people; gets rewritten
> > database		ldap
> > suffix			"ou=People,o=RSC"
> > subordinate
> > uri			"ldap://localhost";
> > 
> > # main database: does not get rewritten
> > # because rwm-suffixmassage rule does not match
> > database		bdb
> > suffix			"o=RSC"
> > </slapd.conf>
> 
> This doesn't work for me. I see on the target server, that the
> original naming context is searched for (in the example above
> the target server is getting "ou=People,o=RSC"). 

Sorry, I got confused.  In fact, locally the databases see all the DN
rewritten; so you should have everything rewritten; I don't think this
can be done yet.  Stay with the other approach and please report about
the issues we discussed above.  Try to deal with each of them
separately, so please don't intermix the bind and the search logs.

p.




Ing. Pierangelo Masarati
Responsabile Open Solution

SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
------------------------------------------
Office:   +39.02.23998309          
Mobile:   +39.333.4963172
Email:    pierangelo.masarati@sys-net.it
------------------------------------------