[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy

To: openldap-software@openldap.org
Subject: Re: successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy
From: "DePriest, Jason R." <jrdepriest@gmail.com>
Date: Thu, 23 Aug 2007 15:11:01 -0500
In-reply-to: <46CDD33B.5000809@sys-net.it>
References: <31b7d2790708220759r74498b8bt227fb1ce5dbe7efa@mail.gmail.com> <46CC5ED2.8030704@sys-net.it> <31b7d2790708220941x633c6b2doca24976081a5c5f2@mail.gmail.com> <46CD695E.5050501@sys-net.it> <31b7d2790708231108y4474e272tedbf7df9d3a101ad@mail.gmail.com> <46CDD33B.5000809@sys-net.it>

On 8/23/07, Pierangelo Masarati <> wrote:
> DePriest, Jason R. wrote:
>
> > I rolled my own OpenLDAP using the 2.3.38 source making sure to
> > include meta and ldap backends.
>
> cool...
>
> > It comes all the way up and doesn't crash when I run a query.
>
> ... almost there...
>
> > However, it does give me these.
> >
> > 00000000: LdapErr:  DSID-0C090627, comment: In order to perform this
> > operation a successful bind must be completed on the connection., data
> > 0, vece
>
> This has nothing to do with OpenLDAP software.
>
> > conn=0 op=4 meta_back_search[0] match="" err=1 (Operations error).
> >
> > ldap_read: want=8 error=Resource temporarily unavailable
>
> Apparently your (non-OpenLDAP) application performed some invalid
> operation.  Unfortunately you don't provide any clue about what
> operation, and my crystal ball is out for maintenance right now.
>
> p.
>
>
>
> Ing. Pierangelo Masarati
> OpenLDAP Core Team
>
> SysNet s.r.l.
> via Dossi, 8 - 27100 Pavia - ITALIA
> http://www.sys-net.it
> ---------------------------------------
> Office:  +39 02 23998309
> Mobile:  +39 333 4963172
> Email:   pierangelo.masarati@sys-net.it
> ---------------------------------------
>
>
>

I have attached a copy of my slapd.conf, a copy of the command-line
query I ran, and a copy of the debug output.

Thank you,
-Jason

ï»¿include		/usr/local/etc/openldap/schema/core.schema
include		/usr/local/etc/openldap/schema/cosine.schema
include		/usr/local/etc/openldap/schema/nis.schema
include		/usr/local/etc/openldap/schema/inetorgperson.schema
pidfile		/usr/local/var/run/slapd.pid
argsfile	/usr/local/var/run/slapd.args
modulepath	/usr/local/libexec/openldap
moduleload	back_bdb.la
moduleload	back_ldap.la
moduleload	back_meta

sizelimit	500
tool-threads	1
backend	bdb
database	meta
suffix		"dc=subdomain,dc=domain,dc=com"
uri		"ldap://server.subdomain.domain.com/ou=Department,dc=ftbco,dc=ftn,dc=com";
protocol-version	3
idassert-bind	bindmethod=simple
	binddn="cn=LDAP-proxy,ou=Service Accounts,dc=subdomain,dc=domain,dc=com"
	credentials="{SHA}Ww4fMMtpcdtvJKh2wyC8t/3gu7E="
	mode=self
	flags=non-prescriptive
chase-referrals	yes
index	objectClass	eq
lastmod	on

ï»¿jrdepriest@ebizsrvb:~$ ldapsearch -u -v -x -b 'ou=Department,dc=subdomain,dc=domain,dc=com' -s one -P 3 '(&(objectCategory=person)(objectClass=user)   (cn=DeP*))' +
ldap_initialize( <DEFAULT> )
filter: (&(objectCategory=person)(objectClass=user)(cn=DeP*))
requesting: +
# extended LDIF
#
# LDAPv3
# base <ou=Department,dc=subdomain,dc=domain,dc=com> with scope oneLevel
# filter: (&(objectCategory=person)(objectClass=user)(cn=DeP*))
# requesting: +
#

# search result
search: 2
result: 1 Operations error

# numResponses: 1

ï»¿jrdepriest@ebizsrvb:~$ sudo /usr/local/libexec/slapd -g openldap -u openldap -d 16383 -f /usr/local/etc/openldap/slapd.conf.stock
@(#) $OpenLDAP: slapd 2.3.38 (Aug 23 2007 14:09:53) $
        root@ebizsrvb:/home/jrdepriest/openldap-2.3.38/servers/slapd
daemon_init: <null>
daemon_init: listen on ldap:///
daemon_init: 1 listeners to open...
ldap_url_parse_ext(ldap:///)
daemon: listener initialized ldap:///
daemon_init: 2 listeners opened
slapd init: initiated server.
bdb_back_initialize: initialize BDB backend
bdb_back_initialize: Sleepycat Software: Berkeley DB 4.4.20: (February 24, 2006)
hdb_back_initialize: initialize HDB backend
hdb_back_initialize: Sleepycat Software: Berkeley DB 4.4.20: (February 24, 2006)
reading config file /usr/local/etc/openldap/slapd.conf.stock
line 5 (include         /usr/local/etc/openldap/schema/core.schema)
reading config file /usr/local/etc/openldap/schema/core.schema
line 77 (attributetype ( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256: knowledge information' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} ))
line 86 (attributetype ( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256: last (family) name(s) for which the entity is known by' SUP name ))
line 92 (attributetype ( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial number of the entity' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} ))
line 96 (attributetype ( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC2256: ISO-3166 country 2-letter code' SUP name SINGLE-VALUE ))
line 100 (attributetype ( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256: locality which this object resides in' SUP name ))
line 104 (attributetype ( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC 'RFC2256: state or province which this object resides in' SUP name ))
line 110 (attributetype ( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC 'RFC2256: street address of this object' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ))
line 114 (attributetype ( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC 'RFC2256: organization this object belongs to' SUP name ))
line 118 (attributetype ( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' ) DESC 'RFC2256: organizational unit this object belongs to' SUP name ))
line 122 (attributetype ( 2.5.4.12 NAME 'title' DESC 'RFC2256: title associated with the entity' SUP name ))
line 134 (attributetype ( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search guide, deprecated by enhancedSearchGuide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.25 ))
line 140 (attributetype ( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256: business category' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ))
line 146 (attributetype ( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256: postal address' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ))
line 152 (attributetype ( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal code' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} ))
line 158 (attributetype ( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post Office Box' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} ))
line 164 (attributetype ( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC 'RFC2256: Physical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ))
line 170 (attributetype ( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256: Telephone Number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} ))
line 174 (attributetype ( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex Number' SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 ))
line 178 (attributetype ( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC2256: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 ))
line 182 (attributetype ( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' ) DESC 'RFC2256: Facsimile (Fax) Telephone Number' SYNTAX 1.3.6.1.4.1.1466.115.121.1.22 ))
line 188 (attributetype ( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121 Address' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{15} ))
line 194 (attributetype ( 2.5.4.25 NAME 'internationaliSDNNumber' DESC 'RFC2256: international ISDN number' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} ))
line 199 (attributetype ( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256: registered postal address' SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ))
line 205 (attributetype ( 2.5.4.27 NAME 'destinationIndicator' DESC 'RFC2256: destination indicator' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{128} ))
line 210 (attributetype ( 2.5.4.28 NAME 'preferredDeliveryMethod' DESC 'RFC2256: preferred delivery method' SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 SINGLE-VALUE ))
line 216 (attributetype ( 2.5.4.29 NAME 'presentationAddress' DESC 'RFC2256: presentation address' EQUALITY presentationAddressMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.43 SINGLE-VALUE ))
line 221 (attributetype ( 2.5.4.30 NAME 'supportedApplicationContext' DESC 'RFC2256: supported application context' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 ))
line 225 (attributetype ( 2.5.4.31 NAME 'member' DESC 'RFC2256: member of a group' SUP distinguishedName ))
line 229 (attributetype ( 2.5.4.32 NAME 'owner' DESC 'RFC2256: owner (of the object)' SUP distinguishedName ))
line 233 (attributetype ( 2.5.4.33 NAME 'roleOccupant' DESC 'RFC2256: occupant of role' SUP distinguishedName ))
line 251 (attributetype ( 2.5.4.36 NAME 'userCertificate' DESC 'RFC2256: X.509 user certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 ))
line 258 (attributetype ( 2.5.4.37 NAME 'cACertificate' DESC 'RFC2256: X.509 CA certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 ))
line 263 (attributetype ( 2.5.4.38 NAME 'authorityRevocationList' DESC 'RFC2256: X.509 authority revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ))
line 268 (attributetype ( 2.5.4.39 NAME 'certificateRevocationList' DESC 'RFC2256: X.509 certificate revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ))
line 273 (attributetype ( 2.5.4.40 NAME 'crossCertificatePair' DESC 'RFC2256: X.509 cross certificate pair, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.10 ))
line 283 (attributetype ( 2.5.4.42 NAME ( 'givenName' 'gn' ) DESC 'RFC2256: first name(s) for which the entity is known by' SUP name ))
line 287 (attributetype ( 2.5.4.43 NAME 'initials' DESC 'RFC2256: initials of some or all of names, but not the surname(s).' SUP name ))
line 291 (attributetype ( 2.5.4.44 NAME 'generationQualifier' DESC 'RFC2256: name qualifier indicating a generation' SUP name ))
line 296 (attributetype ( 2.5.4.45 NAME 'x500UniqueIdentifier' DESC 'RFC2256: X.500 unique identifier' EQUALITY bitStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.6 ))
line 303 (attributetype ( 2.5.4.46 NAME 'dnQualifier' DESC 'RFC2256: DN qualifier' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 ))
line 307 (attributetype ( 2.5.4.47 NAME 'enhancedSearchGuide' DESC 'RFC2256: enhanced search guide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 ))
line 312 (attributetype ( 2.5.4.48 NAME 'protocolInformation' DESC 'RFC2256: protocol information' EQUALITY protocolInformationMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.42 ))
line 322 (attributetype ( 2.5.4.50 NAME 'uniqueMember' DESC 'RFC2256: unique member of a group' EQUALITY uniqueMemberMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.34 ))
line 328 (attributetype ( 2.5.4.51 NAME 'houseIdentifier' DESC 'RFC2256: house identifier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} ))
line 333 (attributetype ( 2.5.4.52 NAME 'supportedAlgorithms' DESC 'RFC2256: supported algorithms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 ))
line 338 (attributetype ( 2.5.4.53 NAME 'deltaRevocationList' DESC 'RFC2256: delta revocation list; use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ))
line 342 (attributetype ( 2.5.4.54 NAME 'dmdName' DESC 'RFC2256: name of DMD' SUP name ))
line 346 (attributetype ( 2.5.4.65 NAME 'pseudonym' DESC 'X.520(4th): pseudonym for the object' SUP name ))
line 366 (objectclass ( 2.5.6.2 NAME 'country' DESC 'RFC2256: a country' SUP top STRUCTURAL MUST c MAY ( searchGuide $ description ) ))
line 371 (objectclass ( 2.5.6.3 NAME 'locality' DESC 'RFC2256: a locality' SUP top STRUCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ l $ description ) ))
line 382 (objectclass ( 2.5.6.4 NAME 'organization' DESC 'RFC2256: an organization' SUP top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $         x121Address $ registeredAddress $ destinationIndicator $      preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $     telephoneNumber $ internationaliSDNNumber $   facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $        postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) ))
line 393 (objectclass ( 2.5.6.5 NAME 'organizationalUnit' DESC 'RFC2256: an organizational unit' SUP top STRUCTURAL MUST ou MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $   x121Address $ registeredAddress $ destinationIndicator $      preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $     telephoneNumber $ internationaliSDNNumber $   facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $     postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) ))
line 399 (objectclass ( 2.5.6.6 NAME 'person' DESC 'RFC2256: a person' SUP top STRUCTURAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $ description ) ))
line 408 (objectclass ( 2.5.6.7 NAME 'organizationalPerson' DESC 'RFC2256: an organizational person' SUP person STRUCTURAL MAY ( title $ x121Address $ registeredAddress $ destinationIndicator $     preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $   telephoneNumber $ internationaliSDNNumber $     facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $      postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l ) ))
line 419 (objectclass ( 2.5.6.8 NAME 'organizationalRole' DESC 'RFC2256: an organizational role' SUP top STRUCTURAL MUST cn MAY ( x121Address $ registeredAddress $ destinationIndicator $    preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $   telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $        seeAlso $ roleOccupant $ preferredDeliveryMethod $ street $     postOfficeBox $ postalCode $ postalAddress $  physicalDeliveryOfficeName $ ou $ st $ l $ description ) ))
line 425 (objectclass ( 2.5.6.9 NAME 'groupOfNames' DESC 'RFC2256: a group of names (DNs)' SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) ))
line 436 (objectclass ( 2.5.6.10 NAME 'residentialPerson' DESC 'RFC2256: an residential person' SUP person STRUCTURAL MUST l MAY ( businessCategory $ x121Address $ registeredAddress $       destinationIndicator $ preferredDeliveryMethod $ telexNumber $        teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $       facsimileTelephoneNumber $ preferredDeliveryMethod $ street $   postOfficeBox $ postalCode $ postalAddress $  physicalDeliveryOfficeName $ st $ l ) ))
line 442 (objectclass ( 2.5.6.11 NAME 'applicationProcess' DESC 'RFC2256: an application process' SUP top STRUCTURAL MUST cn MAY ( seeAlso $ ou $ l $ description ) ))
line 449 (objectclass ( 2.5.6.12 NAME 'applicationEntity' DESC 'RFC2256: an application entity' SUP top STRUCTURAL MUST ( presentationAddress $ cn ) MAY ( supportedApplicationContext $ seeAlso $ ou $ o $ l $ description ) ))
line 454 (objectclass ( 2.5.6.13 NAME 'dSA' DESC 'RFC2256: a directory system agent (a server)' SUP applicationEntity STRUCTURAL MAY knowledgeInformation ))
line 460 (objectclass ( 2.5.6.14 NAME 'device' DESC 'RFC2256: a device' SUP top STRUCTURAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $ description ) ))
line 465 (objectclass ( 2.5.6.15 NAME 'strongAuthenticationUser' DESC 'RFC2256: a strong authentication user' SUP top AUXILIARY MUST userCertificate ))
line 471 (objectclass ( 2.5.6.16 NAME 'certificationAuthority' DESC 'RFC2256: a certificate authority' SUP top AUXILIARY MUST ( authorityRevocationList $ certificateRevocationList $         cACertificate ) MAY crossCertificatePair ))
line 477 (objectclass ( 2.5.6.17 NAME 'groupOfUniqueNames' DESC 'RFC2256: a group of unique names (DN and Unique Identifier)' SUP top STRUCTURAL MUST ( uniqueMember $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) ))
line 482 (objectclass ( 2.5.6.18 NAME 'userSecurityInformation' DESC 'RFC2256: a user security information' SUP top AUXILIARY MAY ( supportedAlgorithms ) ))
line 486 (objectclass ( 2.5.6.16.2 NAME 'certificationAuthority-V2' SUP certificationAuthority AUXILIARY MAY ( deltaRevocationList ) ))
line 492 (objectclass ( 2.5.6.19 NAME 'cRLDistributionPoint' SUP top STRUCTURAL MUST ( cn ) MAY ( certificateRevocationList $ authorityRevocationList $       deltaRevocationList ) ))
line 502 (objectclass ( 2.5.6.20 NAME 'dmd' SUP top STRUCTURAL MUST ( dmdName ) MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $       x121Address $ registeredAddress $ destinationIndicator $        preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $   telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $        street $ postOfficeBox $ postalCode $ postalAddress $   physicalDeliveryOfficeName $ st $ l $ description ) ))
line 510 (objectclass ( 2.5.6.21 NAME 'pkiUser' DESC 'RFC2587: a PKI user' SUP top AUXILIARY MAY userCertificate ))
line 516 (objectclass ( 2.5.6.22 NAME 'pkiCA' DESC 'RFC2587: PKI certificate authority' SUP top AUXILIARY MAY ( authorityRevocationList $ certificateRevocationList $         cACertificate $ crossCertificatePair ) ))
line 521 (objectclass ( 2.5.6.23 NAME 'deltaCRL' DESC 'RFC2587: PKI user' SUP top AUXILIARY MAY deltaRevocationList ))
line 534 (objectclass ( 1.3.6.1.4.1.250.3.15 NAME 'labeledURIObject' DESC 'RFC2079: object that contains the URI attribute type' SUP top AUXILIARY MAY ( labeledURI ) ))
line 551 (attributetype ( 0.9.2342.19200300.100.1.3 NAME ( 'mail' 'rfc822Mailbox' ) DESC 'RFC1274: RFC822 Mailbox'    EQUALITY caseIgnoreIA5Match    SUBSTR caseIgnoreIA5SubstringsMatch    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} ))
line 556 (objectclass ( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObject' DESC 'RFC1274: simple security object' SUP top AUXILIARY MUST userPassword ))
line 564 (attributetype ( 0.9.2342.19200300.100.1.25 NAME ( 'dc' 'domainComponent' ) DESC 'RFC1274/2247: domain component' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))
line 569 (objectclass ( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC 'RFC2247: domain component object' SUP top AUXILIARY MUST dc ))
line 574 (objectclass ( 1.3.6.1.1.3.1 NAME 'uidObject' DESC 'RFC2377: uid object' SUP top AUXILIARY MUST uid ))
line 582 (attributetype ( 0.9.2342.19200300.100.1.37 NAME 'associatedDomain' DESC 'RFC1274: domain associated with object' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 590 (attributetype ( 1.2.840.113549.1.9.1 NAME ( 'email' 'emailAddress' 'pkcs9email' ) DESC 'RFC3280: legacy attribute for email addresses in DNs' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ))
line 6 (include         /usr/local/etc/openldap/schema/cosine.schema)
reading config file /usr/local/etc/openldap/schema/cosine.schema
line 130 (attributetype ( 0.9.2342.19200300.100.1.2 NAME 'textEncodedORAddress' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 168 (attributetype ( 0.9.2342.19200300.100.1.4 NAME 'info' DESC 'RFC1274: general information' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} ))
line 187 (attributetype ( 0.9.2342.19200300.100.1.5 NAME ( 'drink' 'favouriteDrink' ) DESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 205 (attributetype ( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC 'RFC1274: room number' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 227 (attributetype ( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC 'RFC1274: photo (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} ))
line 248 (attributetype ( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC 'RFC1274: category of user' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 264 (attributetype ( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'RFC1274: host computer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 279 (attributetype ( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC 'RFC1274: DN of manager' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 ))
line 296 (attributetype ( 0.9.2342.19200300.100.1.11 NAME 'documentIdentifier' DESC 'RFC1274: unique identifier of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 312 (attributetype ( 0.9.2342.19200300.100.1.12 NAME 'documentTitle' DESC 'RFC1274: title of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 329 (attributetype ( 0.9.2342.19200300.100.1.13 NAME 'documentVersion' DESC 'RFC1274: version of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 344 (attributetype ( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor' DESC 'RFC1274: DN of author of document' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 ))
line 361 (attributetype ( 0.9.2342.19200300.100.1.15 NAME 'documentLocation' DESC 'RFC1274: location of document original' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 380 (attributetype ( 0.9.2342.19200300.100.1.20 NAME ( 'homePhone' 'homeTelephoneNumber' ) DESC 'RFC1274: home telephone number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 ))
line 395 (attributetype ( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC 'RFC1274: DN of secretary' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 ))
line 411 (attributetype ( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNTAX 1.3.6.1.4.1.1466.115.121.1.39 ))
line 480 (attributetype ( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 486 (attributetype ( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 501 (attributetype ( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 516 (attributetype ( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 531 (attributetype ( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 546 (attributetype ( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 581 (attributetype ( 0.9.2342.19200300.100.1.38 NAME 'associatedName' DESC 'RFC1274: DN of entry associated with domain' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 ))
line 599 (attributetype ( 0.9.2342.19200300.100.1.39 NAME 'homePostalAddress' DESC 'RFC1274: home postal address' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ))
line 616 (attributetype ( 0.9.2342.19200300.100.1.40 NAME 'personalTitle' DESC 'RFC1274: personal title' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 635 (attributetype ( 0.9.2342.19200300.100.1.41 NAME ( 'mobile' 'mobileTelephoneNumber' ) DESC 'RFC1274: mobile telephone number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 ))
line 653 (attributetype ( 0.9.2342.19200300.100.1.42 NAME ( 'pager' 'pagerTelephoneNumber' ) DESC 'RFC1274: pager telephone number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 ))
line 671 (attributetype ( 0.9.2342.19200300.100.1.43 NAME ( 'co' 'friendlyCountryName' ) DESC 'RFC1274: friendly country name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ))
line 691 (attributetype ( 0.9.2342.19200300.100.1.44 NAME 'uniqueIdentifier' DESC 'RFC1274: unique identifer' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 713 (attributetype ( 0.9.2342.19200300.100.1.45 NAME 'organizationalStatus' DESC 'RFC1274: organizational status' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 734 (attributetype ( 0.9.2342.19200300.100.1.46 NAME 'janetMailbox' DESC 'RFC1274: Janet mailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} ))
line 764 (attributetype ( 0.9.2342.19200300.100.1.47 NAME 'mailPreferenceOption' DESC 'RFC1274: mail preference option' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ))
line 781 (attributetype ( 0.9.2342.19200300.100.1.48 NAME 'buildingName' DESC 'RFC1274: name of building' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ))
line 796 (attributetype ( 0.9.2342.19200300.100.1.49 NAME 'dSAQuality' DESC 'RFC1274: DSA Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.19 SINGLE-VALUE ))
line 811 (attributetype ( 0.9.2342.19200300.100.1.50 NAME 'singleLevelQuality' DESC 'RFC1274: Single Level Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VALUE ))
line 827 (attributetype ( 0.9.2342.19200300.100.1.51 NAME 'subtreeMinimumQuality' DESC 'RFC1274: Subtree Mininum Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VALUE ))
line 843 (attributetype ( 0.9.2342.19200300.100.1.52 NAME 'subtreeMaximumQuality' DESC 'RFC1274: Subtree Maximun Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VALUE ))
line 865 (attributetype ( 0.9.2342.19200300.100.1.53 NAME 'personalSignature' DESC 'RFC1274: Personal Signature (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23 ))
line 884 (attributetype ( 0.9.2342.19200300.100.1.54 NAME 'dITRedirect' DESC 'RFC1274: DIT Redirect' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 ))
line 900 (attributetype ( 0.9.2342.19200300.100.1.55 NAME 'audio' DESC 'RFC1274: audio (u-law)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.4{25000} ))
line 916 (attributetype ( 0.9.2342.19200300.100.1.56 NAME 'documentPublisher' DESC 'RFC1274: publisher of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ))
line 1084 (objectclass ( 0.9.2342.19200300.100.4.4 NAME ( 'pilotPerson' 'newPilotPerson' ) SUP person STRUCTURAL MAY ( userid $ textEncodedORAddress $ rfc822Mailbox $        favouriteDrink $ roomNumber $ userClass $    homeTelephoneNumber $ homePostalAddress $ secretary $    personalTitle $ preferredDeliveryMethod $ businessCategory $  janetMailbox $ otherMailbox $ mobileTelephoneNumber $   pagerTelephoneNumber $ organizationalStatus $ mailPreferenceOption $ personalSignature ) ))
line 1110 (objectclass ( 0.9.2342.19200300.100.4.5 NAME 'account' SUP top STRUCTURAL MUST userid MAY ( description $ seeAlso $ localityName $         organizationName $ organizationalUnitName $ host ) ))
line 1142 (objectclass ( 0.9.2342.19200300.100.4.6 NAME 'document' SUP top STRUCTURAL MUST documentIdentifier MAY ( commonName $ description $ seeAlso $ localityName $       organizationName $ organizationalUnitName $  documentTitle $ documentVersion $ documentAuthor $       documentLocation $ documentPublisher ) ))
line 1165 (objectclass ( 0.9.2342.19200300.100.4.7 NAME 'room' SUP top STRUCTURAL MUST commonName MAY ( roomNumber $ description $ seeAlso $ telephoneNumber ) ))
line 1191 (objectclass ( 0.9.2342.19200300.100.4.9 NAME 'documentSeries' SUP top STRUCTURAL MUST commonName MAY ( description $ seeAlso $ telephonenumber $   localityName $ organizationName $ organizationalUnitName ) ))
line 1222 (objectclass ( 0.9.2342.19200300.100.4.13 NAME 'domain' SUP top STRUCTURAL MUST domainComponent MAY ( associatedName $ organizationName $ description $     businessCategory $ seeAlso $ searchGuide $ userPassword $     localityName $ stateOrProvinceName $ streetAddress $    physicalDeliveryOfficeName $ postalAddress $ postalCode $     postOfficeBox $ streetAddress $         facsimileTelephoneNumber $ internationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $ telexNumber $      preferredDeliveryMethod $ destinationIndicator $      registeredAddress $ x121Address ) ))
line 1252 (objectclass ( 0.9.2342.19200300.100.4.14 NAME 'RFC822localPart' SUP domain STRUCTURAL MAY ( commonName $ surname $ description $ seeAlso $ telephoneNumber $       physicalDeliveryOfficeName $ postalAddress $ postalCode $     postOfficeBox $ streetAddress $         facsimileTelephoneNumber $ internationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $    telexNumber $ preferredDeliveryMethod $ destinationIndicator $        registeredAddress $ x121Address ) ))
line 1275 (objectclass ( 0.9.2342.19200300.100.4.15 NAME 'dNSDomain' SUP domain STRUCTURAL MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $   SOARecord $ CNAMERecord ) ))
line 1293 (objectclass ( 0.9.2342.19200300.100.4.17 NAME 'domainRelatedObject' DESC 'RFC1274: an object related to an domain' SUP top AUXILIARY MUST associatedDomain ))
line 1311 (objectclass ( 0.9.2342.19200300.100.4.18 NAME 'friendlyCountry' SUP country STRUCTURAL MUST friendlyCountryName ))
line 1345 (objectclass ( 0.9.2342.19200300.100.4.20 NAME 'pilotOrganization' SUP ( organization $ organizationalUnit ) STRUCTURAL MAY buildingName ))
line 1361 (objectclass ( 0.9.2342.19200300.100.4.21 NAME 'pilotDSA' SUP dsa STRUCTURAL MAY dSAQuality ))
line 1382 (objectclass ( 0.9.2342.19200300.100.4.22 NAME 'qualityLabelledData' SUP top AUXILIARY MUST dsaQuality MAY ( subtreeMinimumQuality $ subtreeMaximumQuality ) ))
line 7 (include         /usr/local/etc/openldap/schema/nis.schema)
reading config file /usr/local/etc/openldap/schema/nis.schema
line 53 (attributetype ( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS field; the common name' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))
line 58 (attributetype ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The absolute path to the home directory' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))
line 63 (attributetype ( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path to the login shell' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))
line 67 (attributetype ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 71 (attributetype ( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 75 (attributetype ( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 79 (attributetype ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 83 (attributetype ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 87 (attributetype ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 91 (attributetype ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 96 (attributetype ( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 101 (attributetype ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 105 (attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC 'Netgroup triple' SYNTAX 1.3.6.1.1.1.0.0 ))
line 109 (attributetype ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 112 (attributetype ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' SUP name ))
line 116 (attributetype ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 120 (attributetype ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ))
line 125 (attributetype ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IP address' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ))
line 130 (attributetype ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP network' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE ))
line 135 (attributetype ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP netmask' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE ))
line 140 (attributetype ( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC address' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ))
line 144 (attributetype ( 1.3.6.1.1.1.1.23 NAME 'bootParameter' DESC 'rpc.bootparamd parameter' SYNTAX 1.3.6.1.1.1.0.1 ))
line 149 (attributetype ( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image name' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ))
line 152 (attributetype ( 1.3.6.1.1.1.1.26 NAME 'nisMapName' SUP name ))
line 157 (attributetype ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} SINGLE-VALUE ))
line 165 (objectclass ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' DESC 'Abstraction of an account with POSIX attributes' SUP top AUXILIARY MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $ gecos $ description ) ))
line 173 (objectclass ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' DESC 'Additional attributes for shadow passwords' SUP top AUXILIARY MUST uid MAY ( userPassword $ shadowLastChange $ shadowMin $       shadowMax $ shadowWarning $ shadowInactive $       shadowExpire $ shadowFlag $ description ) ))
line 179 (objectclass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' DESC 'Abstraction of a group of accounts' SUP top STRUCTURAL MUST ( cn $ gidNumber ) MAY ( userPassword $ memberUid $ description ) ))
line 185 (objectclass ( 1.3.6.1.1.1.2.3 NAME 'ipService' DESC 'Abstraction an Internet Protocol service' SUP top STRUCTURAL MUST ( cn $ ipServicePort $ ipServiceProtocol ) MAY ( description ) ))
line 191 (objectclass ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' DESC 'Abstraction of an IP protocol' SUP top STRUCTURAL MUST ( cn $ ipProtocolNumber $ description ) MAY description ))
line 197 (objectclass ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' DESC 'Abstraction of an ONC/RPC binding' SUP top STRUCTURAL MUST ( cn $ oncRpcNumber $ description ) MAY description ))
line 203 (objectclass ( 1.3.6.1.1.1.2.6 NAME 'ipHost' DESC 'Abstraction of a host, an IP device' SUP top AUXILIARY MUST ( cn $ ipHostNumber ) MAY ( l $ description $ manager ) ))
line 209 (objectclass ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' DESC 'Abstraction of an IP network' SUP top STRUCTURAL MUST ( cn $ ipNetworkNumber ) MAY ( ipNetmaskNumber $ l $ description $ manager ) ))
line 215 (objectclass ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' DESC 'Abstraction of a netgroup' SUP top STRUCTURAL MUST cn MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) ))
line 221 (objectclass ( 1.3.6.1.1.1.2.9 NAME 'nisMap' DESC 'A generic abstraction of a NIS map' SUP top STRUCTURAL MUST nisMapName MAY description ))
line 227 (objectclass ( 1.3.6.1.1.1.2.10 NAME 'nisObject' DESC 'An entry in a NIS map' SUP top STRUCTURAL MUST ( cn $ nisMapEntry $ nisMapName ) MAY description ))
line 232 (objectclass ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' DESC 'A device with a MAC address' SUP top AUXILIARY MAY macAddress ))
line 237 (objectclass ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' DESC 'A device with boot parameters' SUP top AUXILIARY MAY ( bootFile $ bootParameter ) ))
line 8 (include         /usr/local/etc/openldap/schema/inetorgperson.schema)
reading config file /usr/local/etc/openldap/schema/inetorgperson.schema
line 36 (attributetype ( 2.16.840.1.113730.3.1.1 NAME 'carLicense' DESC 'RFC2798: vehicle license or registration plate' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ))
line 46 (attributetype ( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber' DESC 'RFC2798: identifies a department within an organization' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ))
line 59 (attributetype ( 2.16.840.1.113730.3.1.241 NAME 'displayName' DESC 'RFC2798: preferred name to be used when displaying entries' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ))
line 70 (attributetype ( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber' DESC 'RFC2798: numerically identifies an employee within an organization' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ))
line 81 (attributetype ( 2.16.840.1.113730.3.1.4 NAME 'employeeType' DESC 'RFC2798: type of employment for a person' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ))
line 92 (attributetype ( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto' DESC 'RFC2798: a JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 ))
line 107 (attributetype ( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage' DESC 'RFC2798: preferred written or spoken language for a person' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ))
line 123 (attributetype ( 2.16.840.1.113730.3.1.40 NAME 'userSMIMECertificate' DESC 'RFC2798: PKCS#7 SignedData used to support S/MIME' SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 ))
line 135 (attributetype ( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12' DESC 'RFC2798: personal identity information, a PKCS #12 PFX' SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 ))
line 155 (objectclass   ( 2.16.840.1.113730.3.2.2    NAME 'inetOrgPerson' DESC 'RFC2798: Internet Organizational Person'    SUP organizationalPerson    STRUCTURAL MAY (      audio $ businessCategory $ carLicense $ departmentNumber $    displayName $ employeeNumber $ employeeType $ givenName $       homePhone $ homePostalAddress $ initials $ jpegPhoto $        labeledURI $ mail $ manager $ mobile $ o $ pager $      photo $ roomNumber $ secretary $ uid $ userCertificate $      x500uniqueIdentifier $ preferredLanguage $      userSMIMECertificate $ userPKCS12 ) ))
line 16 (pidfile                /usr/local/var/run/slapd.pid)
line 17 (argsfile       /usr/local/var/run/slapd.args)
line 26 (moduleload     back_meta)
/usr/local/etc/openldap/slapd.conf.stock: line 26: keyword <moduleload> ignored
line 28 (sizelimit      500)
line 29 (tool-threads   1)
line 32 (backend        bdb)
line 79 (database       meta)
line 81 (suffix         "dc=subdomain,dc=domain,dc=com")
>>> dnPrettyNormal: <dc=subdomain,dc=domain,dc=com>
=> ldap_bv2dn(dc=subdomain,dc=domain,dc=com,0)
<= ldap_bv2dn(dc=subdomain,dc=domain,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=subdomain,dc=domain,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=subdomain,dc=domain,dc=com)=0
<<< dnPrettyNormal: <dc=subdomain,dc=domain,dc=com>, <dc=subdomain,dc=domain,dc=com>
line 83 (uri            "ldap://server.subdomain.domain.com/ou=Department,dc=subdomain,dc=domain,dc=com";)
ldap_url_parse_ext(ldap://server.subdomain.domain.com/ou=Department,dc=subdomain,dc=domain,dc=com)
>>> dnPrettyNormal: <ou=Department,dc=subdomain,dc=domain,dc=com>
=> ldap_bv2dn(ou=Department,dc=subdomain,dc=domain,dc=com,0)
<= ldap_bv2dn(ou=Department,dc=subdomain,dc=domain,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(ou=Department,dc=subdomain,dc=domain,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(ou=department,dc=subdomain,dc=domain,dc=com)=0
<<< dnPrettyNormal: <ou=Department,dc=subdomain,dc=domain,dc=com>, <ou=department,dc=subdomain,dc=domain,dc=com>
line 85 (protocol-version       3)
line 91 (idassert-bind ***)
>>> dnNormalize: <cn=LDAP-proxy,ou=Service Accounts,dc=ftbco,dc=ftb,dc=com>
=> ldap_bv2dn(cn=LDAP-proxy,ou=Service Accounts,dc=ftbco,dc=ftb,dc=com,0)
<= ldap_bv2dn(cn=LDAP-proxy,ou=Service Accounts,dc=ftbco,dc=ftb,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=ldap-proxy,ou=service accounts,dc=ftbco,dc=ftb,dc=com)=0
<<< dnNormalize: <cn=ldap-proxy,ou=service accounts,dc=ftbco,dc=ftb,dc=com>
line 93 (chase-referrals        yes)
line 95 (index  objectClass     eq)
/usr/local/etc/openldap/slapd.conf.stock: line 95: unknown directive <index> inside backend database definition (ignored).
line 97 (lastmod        on)
>>> dnNormalize: <cn=Subschema>
=> ldap_bv2dn(cn=Subschema,0)
<= ldap_bv2dn(cn=Subschema)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=subschema)=0
<<< dnNormalize: <cn=subschema>
matching_rule_use_init
    1.2.840.113556.1.4.804 (integerBitOrMatch): matchingRuleUse: ( 1.2.840.113556.1.4.804 NAME 'integerBitOrMatch' APPLIES ( supportedLDAPVersion $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcDbCacheFree $ olcDbCacheSize $ olcDbIDLcacheSize $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcSpSessionlog $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    1.2.840.113556.1.4.803 (integerBitAndMatch): matchingRuleUse: ( 1.2.840.113556.1.4.803 NAME 'integerBitAndMatch' APPLIES ( supportedLDAPVersion $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcDbCacheFree $ olcDbCacheSize $ olcDbIDLcacheSize $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcSpSessionlog $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    1.3.6.1.4.1.1466.109.114.2 (caseIgnoreIA5Match): matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' APPLIES ( altServer $ mail $ dc $ associatedDomain $ email $ aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $ memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $ macAddress $ bootFile $ nisMapEntry ) )
    1.3.6.1.4.1.1466.109.114.1 (caseExactIA5Match): matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' APPLIES ( altServer $ mail $ dc $ associatedDomain $ email $ aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $ memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $ macAddress $ bootFile $ nisMapEntry ) )
    2.5.13.35 (certificateMatch): matchingRuleUse: ( 2.5.13.35 NAME 'certificateMatch' APPLIES ( userCertificate $ cACertificate ) )
    2.5.13.34 (certificateExactMatch): matchingRuleUse: ( 2.5.13.34 NAME 'certificateExactMatch' APPLIES ( userCertificate $ cACertificate ) )
    2.5.13.30 (objectIdentifierFirstComponentMatch): matchingRuleUse: ( 2.5.13.30 NAME 'objectIdentifierFirstComponentMatch' APPLIES ( supportedControl $ supportedExtension $ supportedFeatures $ ldapSyntaxes $ supportedApplicationContext ) )
    2.5.13.29 (integerFirstComponentMatch): matchingRuleUse: ( 2.5.13.29 NAME 'integerFirstComponentMatch' APPLIES ( supportedLDAPVersion $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcDbCacheFree $ olcDbCacheSize $ olcDbIDLcacheSize $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcSpSessionlog $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    2.5.13.27 (generalizedTimeMatch): matchingRuleUse: ( 2.5.13.27 NAME 'generalizedTimeMatch' APPLIES ( createTimestamp $ modifyTimestamp ) )
    2.5.13.24 (protocolInformationMatch): matchingRuleUse: ( 2.5.13.24 NAME 'protocolInformationMatch' APPLIES protocolInformation )
    2.5.13.23 (uniqueMemberMatch): matchingRuleUse: ( 2.5.13.23 NAME 'uniqueMemberMatch' APPLIES uniqueMember )
    2.5.13.22 (presentationAddressMatch): matchingRuleUse: ( 2.5.13.22 NAME 'presentationAddressMatch' APPLIES presentationAddress )
    2.5.13.20 (telephoneNumberMatch): matchingRuleUse: ( 2.5.13.20 NAME 'telephoneNumberMatch' APPLIES ( telephoneNumber $ homePhone $ mobile $ pager ) )
    2.5.13.17 (octetStringMatch): matchingRuleUse: ( 2.5.13.17 NAME 'octetStringMatch' APPLIES userPassword )
    2.5.13.16 (bitStringMatch): matchingRuleUse: ( 2.5.13.16 NAME 'bitStringMatch' APPLIES x500UniqueIdentifier )
    2.5.13.14 (integerMatch): matchingRuleUse: ( 2.5.13.14 NAME 'integerMatch' APPLIES ( supportedLDAPVersion $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcDbCacheFree $ olcDbCacheSize $ olcDbIDLcacheSize $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcSpSessionlog $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    2.5.13.13 (booleanMatch): matchingRuleUse: ( 2.5.13.13 NAME 'booleanMatch' APPLIES ( hasSubordinates $ olcGentleHUP $ olcLastMod $ olcReadOnly $ olcReverseLookup $ olcDbNoSync $ olcDbDirtyRead $ olcDbLinearIndex $ olcChainCacheURI $ olcChainReturnError $ olcDbRebindAsUser $ olcDbChaseReferrals $ olcDbProxyWhoAmI $ olcDbSingleConn $ olcDbUseTemporaryConn $ olcSpNoPresent $ olcSpReloadHint ) )
    2.5.13.11 (caseIgnoreListMatch): matchingRuleUse: ( 2.5.13.11 NAME 'caseIgnoreListMatch' APPLIES ( postalAddress $ registeredAddress $ homePostalAddress ) )
    2.5.13.8 (numericStringMatch): matchingRuleUse: ( 2.5.13.8 NAME 'numericStringMatch' APPLIES ( x121Address $ internationaliSDNNumber ) )
    2.5.13.7 (caseExactSubstringsMatch): matchingRuleUse: ( 2.5.13.7 NAME 'caseExactSubstringsMatch' APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )
    2.5.13.6 (caseExactOrderingMatch): matchingRuleUse: ( 2.5.13.6 NAME 'caseExactOrderingMatch' APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )
    2.5.13.5 (caseExactMatch): matchingRuleUse: ( 2.5.13.5 NAME 'caseExactMatch' APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcInclude $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcSizeLimit $ olcSrvtab $ olcSubordinate $ olcSyncrepl $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcUpdateRef $ olcDbDirectory $ olcDbCheckpoint $ olcDbConfig $ olcDbIndex $ olcDbLockDetect $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcAuditlogFile $ olcSpCheckpoint $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ buildingName $ documentPublisher $ ipServiceProtocol $ nisMapName $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguage ) )
    2.5.13.4 (caseIgnoreSubstringsMatch): matchingRuleUse: ( 2.5.13.4 NAME 'caseIgnoreSubstringsMatch' APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )
    2.5.13.3 (caseIgnoreOrderingMatch): matchingRuleUse: ( 2.5.13.3 NAME 'caseIgnoreOrderingMatch' APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )
    2.5.13.2 (caseIgnoreMatch): matchingRuleUse: ( 2.5.13.2 NAME 'caseIgnoreMatch' APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcInclude $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcSizeLimit $ olcSrvtab $ olcSubordinate $ olcSyncrepl $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcUpdateRef $ olcDbDirectory $ olcDbCheckpoint $ olcDbConfig $ olcDbIndex $ olcDbLockDetect $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcAuditlogFile $ olcSpCheckpoint $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ buildingName $ documentPublisher $ ipServiceProtocol $ nisMapName $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguage ) )
    1.2.36.79672281.1.13.3 (rdnMatch):     2.5.13.1 (distinguishedNameMatch): matchingRuleUse: ( 2.5.13.1 NAME 'distinguishedNameMatch' APPLIES ( creatorsName $ modifiersName $ subschemaSubentry $ namingContexts $ aliasedObjectName $ distinguishedName $ seeAlso $ olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ olcSuffix $ olcUpdateDN $ olcDbACLAuthcDn $ olcDbIDAssertAuthcDn $ member $ owner $ roleOccupant $ manager $ documentAuthor $ secretary $ associatedName $ dITRedirect ) )
    2.5.13.0 (objectIdentifierMatch): matchingRuleUse: ( 2.5.13.0 NAME 'objectIdentifierMatch' APPLIES ( supportedControl $ supportedExtension $ supportedFeatures $ supportedApplicationContext ) )
slapd startup: initiated.
backend_startup_one: starting "cn=config"
config_back_db_open
config_build_entry: "cn=config"
config_build_entry: "cn=include{0}"
config_build_entry: "cn=include{1}"
config_build_entry: "cn=include{2}"
config_build_entry: "cn=include{3}"
config_build_entry: "cn=schema"
config_build_entry: "cn={0}core"
config_build_entry: "cn={1}cosine"
config_build_entry: "cn={2}nis"
config_build_entry: "cn={3}inetorgperson"
config_build_entry: "olcDatabase={-1}frontend"
config_build_entry: "olcDatabase={0}config"
WARNING: No dynamic config support for database meta.
config_build_entry: "olcDatabase={1}meta"
backend_startup_one: starting "dc=subdomain,dc=domain,dc=com"
slapd starting
daemon: added 4r listener=(nil)
daemon: added 7r listener=0x81eb238
daemon: added 8r listener=0x81eb300
daemon: epoll: listen=7 active_threads=0 tvp=NULL
daemon: epoll: listen=8 active_threads=0 tvp=NULL
daemon: activity on 1 descriptor
daemon: activity on:
>>> slap_listener(ldap:///)
daemon: listen=8, new connection on 9
daemon: added 9r (active) listener=(nil)
conn=0 fd=9 ACCEPT from IP=127.0.0.1:45193 (IP=0.0.0.0:389)
daemon: epoll: listen=7 active_threads=0 tvp=NULL
daemon: epoll: listen=8 active_threads=0 tvp=NULL
daemon: activity on 1 descriptor
daemon: activity on: 9r
daemon: read active on 9
connection_get(9)
connection_get(9): got connid=0
connection_read(9): checking for input on id=0
ber_get_next
ldap_read: want=8, got=8
  0000:  30 0c 02 01 01 60 07 02                            0....`..
ldap_read: want=6, got=6
  0000:  01 03 04 00 80 00                                  ......
ber_get_next: tag 0x30 len 12 contents:
ber_dump: buf=0x08247a80 ptr=0x08247a80 end=0x08247a8c len=12
  0000:  02 01 01 60 07 02 01 03  04 00 80 00               ...`........
ber_get_next
ldap_read: want=8 error=Resource temporarily unavailable
daemon: epoll: listen=7 active_threads=0 tvp=NULL
daemon: epoll: listen=8 active_threads=0 tvp=NULL
do_bind
ber_scanf fmt ({imt) ber:
ber_dump: buf=0x08247a80 ptr=0x08247a83 end=0x08247a8c len=9
  0000:  60 07 02 01 03 04 00 80  00                        `........
ber_scanf fmt (m}) ber:
ber_dump: buf=0x08247a80 ptr=0x08247a8a end=0x08247a8c len=2
  0000:  00 00                                              ..
>>> dnPrettyNormal: <>
<<< dnPrettyNormal: <>, <>
do_bind: version=3 dn="" method=128
conn=0 op=0 BIND dn="" method=128
send_ldap_result: conn=0 op=0 p=3
send_ldap_result: err=0 matched="" text=""
send_ldap_response: msgid=1 tag=97 err=0
ber_flush: 14 bytes to sd 9
  0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00         0....a........
ldap_write: want=14, written=14
  0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00         0....a........
conn=0 op=0 RESULT tag=97 err=0 text=
do_bind: v3 anonymous bind
daemon: activity on 1 descriptor
daemon: activity on: 9r
daemon: read active on 9
connection_get(9)
connection_get(9): got connid=0
connection_read(9): checking for input on id=0
ber_get_next
ldap_read: want=8, got=8
  0000:  30 81 80 02 01 02 63 7b                            0.....c{
ldap_read: want=123, got=123
  0000:  04 27 6f 75 3d xx xx xx  xx xx xx xx xx xx xx xx   .'ou=xxxxxxxxxxx
  0010:  xx xx 2c 64 63 3d xx xx  xx xx xx 2c 64 63 3d xx   xx,dc=xxxxx,dc=x
  0020:  xx xx 2c 64 63 3d 63 6f  6d 0a 01 01 0a 01 00 02   xx,dc=com.......
  0030:  01 00 02 01 00 01 01 00  a0 3c a3 18 04 0e 6f 62   .........<....ob
  0040:  6a 65 63 74 43 61 74 65  67 6f 72 79 04 06 70 65   jectCategory..pe
  0050:  72 73 6f 6e a3 13 04 0b  6f 62 6a 65 63 74 43 6c   rson....objectCl
  0060:  61 73 73 04 04 75 73 65  72 a4 0b 04 02 63 6e 30   ass..user....cn0
  0070:  05 80 03 44 65 50 30 03  04 01 2b                  ...DeP0...+
ber_get_next: tag 0x30 len 128 contents:
ber_dump: buf=0x08264bc0 ptr=0x08264bc0 end=0x08264c40 len=128
  0000:  02 01 02 63 7b 04 27 6f  75 3d xx xx xx xx xx xx   ...c{.'ou=xxxxxx
  0010:  xx xx xx xx xx xx xx 2c  64 63 3d xx xx xx xx xx   xxxxxxx,dc=xxxxx
  0020:  2c 64 63 3d xx xx xx 2c  64 63 3d 63 6f 6d 0a 01   ,dc=xxx,dc=com..
  0030:  01 0a 01 00 02 01 00 02  01 00 01 01 00 a0 3c a3   ..............<.
  0040:  18 04 0e 6f 62 6a 65 63  74 43 61 74 65 67 6f 72   ...objectCategor
  0050:  79 04 06 70 65 72 73 6f  6e a3 13 04 0b 6f 62 6a   y..person....obj
  0060:  65 63 74 43 6c 61 73 73  04 04 75 73 65 72 a4 0b   ectClass..user..
  0070:  04 02 63 6e 30 05 80 03  44 65 50 30 03 04 01 2b   ..cn0...DeP0...+
ber_get_next
ldap_read: want=8 error=Resource temporarily unavailable
daemon: epoll: listen=7 active_threads=0 tvp=NULL
daemon: epoll: listen=8 active_threads=0 tvp=NULL
do_search
ber_scanf fmt ({miiiib) ber:
ber_dump: buf=0x08264bc0 ptr=0x08264bc3 end=0x08264c40 len=125
  0000:  63 7b 04 27 6f 75 3d xx  xx xx xx xx xx xx xx xx   c{.'ou=xxxxxxxxx
  0010:  xx xx xx xx 2c 64 63 3d  xx xx xx xx xx 2c 64 63   xxxx,dc=xxxxx,dc
  0020:  3d xx xx xx 2c 64 63 3d  63 6f 6d 0a 01 01 0a 01   =xxx,dc=com.....
  0030:  00 02 01 00 02 01 00 01  01 00 a0 3c a3 18 04 0e   ...........<....
  0040:  6f 62 6a 65 63 74 43 61  74 65 67 6f 72 79 04 06   objectCategory..
  0050:  70 65 72 73 6f 6e a3 13  04 0b 6f 62 6a 65 63 74   person....object
  0060:  43 6c 61 73 73 04 04 75  73 65 72 a4 0b 04 02 63   Class..user....c
  0070:  6e 30 05 80 03 44 65 50  30 03 04 01 2b            n0...DeP0...+
>>> dnPrettyNormal: <ou=Department,dc=subdomain,dc=domain,dc=com>
=> ldap_bv2dn(ou=Department,dc=subdomain,dc=domain,dc=com,0)
<= ldap_bv2dn(ou=Department,dc=subdomain,dc=domain,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(ou=Department,dc=subdomain,dc=domain,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(ou=department,dc=subdomain,dc=domain,dc=com)=0
<<< dnPrettyNormal: <ou=Department,dc=subdomain,dc=domain,dc=com>, <ou=department,dc=subdomain,dc=domain,dc=com>
SRCH "ou=Department,dc=subdomain,dc=domain,dc=com" 1 0    0 0 0
begin get_filter
AND
begin get_filter_list
begin get_filter
EQUALITY
ber_scanf fmt ({mm}) ber:
ber_dump: buf=0x08264bc0 ptr=0x08264bff end=0x08264c40 len=65
  0000:  a3 18 04 0e 6f 62 6a 65  63 74 43 61 74 65 67 6f   ....objectCatego
  0010:  72 79 04 06 70 65 72 73  6f 6e a3 13 04 0b 6f 62   ry..person....ob
  0020:  6a 65 63 74 43 6c 61 73  73 04 04 75 73 65 72 a4   jectClass..user.
  0030:  0b 04 02 63 6e 30 05 80  03 44 65 50 30 03 04 01   ...cn0...DeP0...
  0040:  2b                                                 +
get_ava: unknown attributeType objectCategory
end get_filter 0
begin get_filter
EQUALITY
ber_scanf fmt ({mm}) ber:
ber_dump: buf=0x08264bc0 ptr=0x08264c19 end=0x08264c40 len=39
  0000:  00 13 04 0b 6f 62 6a 65  63 74 43 6c 61 73 73 04   ....objectClass.
  0010:  04 75 73 65 72 a4 0b 04  02 63 6e 30 05 80 03 44   .user....cn0...D
  0020:  65 50 30 03 04 01 2b                               eP0...+
get_ava: illegal value for attributeType objectClass
end get_filter 0
begin get_filter
SUBSTRINGS
begin get_ssa
ber_scanf fmt ({m) ber:
ber_dump: buf=0x08264bc0 ptr=0x08264c2e end=0x08264c40 len=18
  0000:  00 0b 04 02 63 6e 30 05  80 03 44 65 50 30 03 04   ....cn0...DeP0..
  0010:  01 2b                                              .+
ber_scanf fmt (m) ber:
ber_dump: buf=0x08264bc0 ptr=0x08264c36 end=0x08264c40 len=10
  0000:  80 03 44 65 50 30 03 04  01 2b                     ..DeP0...+
  INITIAL
end get_ssa
end get_filter 0
end get_filter_list
end get_filter 0
    filter: (&(?=undefined)(?=undefined)(cn=dep*))
ber_scanf fmt ({M}}) ber:
ber_dump: buf=0x08264bc0 ptr=0x08264c3b end=0x08264c40 len=5
  0000:  00 03 04 01 2b                                     ....+
    attrs: +
conn=0 op=1 SRCH base="ou=Department,dc=subdomain,dc=domain,dc=com" scope=1 deref=0 filter="(&(?=undefined)(?=undefined)(cn=dep*))"
conn=0 op=1 SRCH attr=+
==> limits_get: conn=0 op=1 dn="[anonymous]"
ldap_create
ldap_url_parse_ext(ldap://server.subdomain.domain.com)
conn=0 op=1: meta_back_getconn[0]
conn=0 op=1 meta_back_getconn: candidates=1 conn=-3 inserted
conn=0 op=1 >>> meta_back_search_start[0]
conn=0 op=1 >>> meta_search_dobind_init[0]
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP server.subdomain.domain.com:389
ldap_new_socket: 10
ldap_prepare_socket: 10
ldap_connect_to_host: Trying 10.226.45.21:389
ldap_connect_timeout: fd: 10 tm: -1 async: 0
ldap_open_defconn: successful
ldap_send_server_request
ber_scanf fmt ({it) ber:
ber_dump: buf=0x0826cfc8 ptr=0x0826cfc8 end=0x0826cfd6 len=14
  0000:  30 0c 02 01 01 60 07 02  01 03 04 00 80 00         0....`........
ber_scanf fmt ({i) ber:
ber_dump: buf=0x0826cfc8 ptr=0x0826cfcd end=0x0826cfd6 len=9
  0000:  60 07 02 01 03 04 00 80  00                        `........
ber_flush: 14 bytes to sd 10
  0000:  30 0c 02 01 01 60 07 02  01 03 04 00 80 00         0....`........
ldap_write: want=14, written=14
  0000:  30 0c 02 01 01 60 07 02  01 03 04 00 80 00         0....`........
conn=0 op=1 <<< meta_search_dobind_init[0]=2
conn=0 op=1 <<< meta_back_search_start[0]=2
conn=0 op=1 meta_back_search: ncandidates=1 cnd="*"
ldap_result ld 0x8264ca8 msgid 1
ldap_chkResponseList ld 0x8264ca8 msgid 1 all 2
ldap_chkResponseList returns ld 0x8264ca8 NULL
wait4msg ld 0x8264ca8 msgid 1 (timeout 0 usec)
wait4msg continue ld 0x8264ca8 msgid 1 all 2
** ld 0x8264ca8 Connections:
* host: server.subdomain.domain.com  port: 389  (default)
  refcnt: 2  status: Connected
  last used: Thu Aug 23 14:45:47 2007

** ld 0x8264ca8 Outstanding Requests:
 * msgid 1,  origid 1, status InProgress
   outstanding referrals 0, parent count 0
** ld 0x8264ca8 Response Queue:
   Empty
ldap_chkResponseList ld 0x8264ca8 msgid 1 all 2
ldap_chkResponseList returns ld 0x8264ca8 NULL
ldap_int_select
read1msg: ld 0x8264ca8 msgid 1 all 2
ber_get_next
ldap_read: want=8, got=8
  0000:  30 84 00 00 00 10 02 01                            0.......
ldap_read: want=14, got=14
  0000:  01 61 84 00 00 00 07 0a  01 00 04 00 04 00         .a............
ber_get_next: tag 0x30 len 16 contents:
ber_dump: buf=0x0826e530 ptr=0x0826e530 end=0x0826e540 len=16
  0000:  02 01 01 61 84 00 00 00  07 0a 01 00 04 00 04 00   ...a............
read1msg: ld 0x8264ca8 msgid 1 message type bind
ber_scanf fmt ({eaa) ber:
ber_dump: buf=0x0826e530 ptr=0x0826e533 end=0x0826e540 len=13
  0000:  61 84 00 00 00 07 0a 01  00 04 00 04 00            a............
read1msg: ld 0x8264ca8 0 new referrals
read1msg:  mark request completed, ld 0x8264ca8 msgid 1
request done: ld 0x8264ca8 msgid 1
res_errno: 0, res_error: <>, res_matched: <>
ldap_free_request (origid 1, msgid 1)
ldap_free_connection 0 1
ldap_free_connection: refcnt 1
ldap_parse_result
ber_scanf fmt ({iaa) ber:
ber_dump: buf=0x0826e530 ptr=0x0826e533 end=0x0826e540 len=13
  0000:  61 84 00 00 00 07 0a 01  00 04 00 04 00            a............
ber_scanf fmt (}) ber:
ber_dump: buf=0x0826e530 ptr=0x0826e540 end=0x0826e540 len=0

conn=0 op=1 >>> meta_back_search_start[0]
conn=0 op=1 >>> meta_search_dobind_init[0]
conn=0 op=1 <<< meta_search_dobind_init[0]=1
[rw] searchBase: "ou=Department,dc=subdomain,dc=domain,dc=com" -> "ou=Department,dc=subdomain,dc=domain,dc=com"
[rw] searchFilter: "(&(!(objectClass=*))(!(objectClass=*))(cn=dep*))" -> "(&(!(objectClass=*))(!(objectClass=*))(cn=dep*))"
ldap_search_ext
put_filter: "(&(!(objectClass=*))(!(objectClass=*))(cn=dep*))"
put_filter: AND
put_filter_list "(!(objectClass=*))(!(objectClass=*))(cn=dep*)"
put_filter: "(!(objectClass=*))"
put_filter: NOT
put_filter_list "(objectClass=*)"
put_filter: "(objectClass=*)"
put_filter: simple
put_simple_filter: "objectClass=*"
put_filter: "(!(objectClass=*))"
put_filter: NOT
put_filter_list "(objectClass=*)"
put_filter: "(objectClass=*)"
put_filter: simple
put_simple_filter: "objectClass=*"
put_filter: "(cn=dep*)"
put_filter: simple
put_simple_filter: "cn=dep*"
put_substring_filter "cn=dep*"
ldap_build_search_req ATTRS:
    +
ldap_send_initial_request
ldap_send_server_request
ber_scanf fmt ({it) ber:
ber_dump: buf=0x0826e568 ptr=0x0826e568 end=0x0826e5db len=115
  0000:  30 71 02 01 02 63 6c 04  27 6f 75 3d xx xx xx xx   0q...cl.'ou=xxxx
  0010:  20 53 65 63 75 72 69 74  79 2c 64 63 3d xx xx xx    Security,dc=xxx
  0020:  xx xx 2c 64 63 3d xx xx  xx 2c 64 63 3d 63 6f 6d   xx,dc=xxx,dc=com
  0030:  0a 01 01 0a 01 00 02 02  01 f4 02 02 0e 10 01 01   ................
  0040:  00 a0 2b a2 0d 87 0b 6f  62 6a 65 63 74 43 6c 61   ..+....objectCla
  0050:  73 73 a2 0d 87 0b 6f 62  6a 65 63 74 43 6c 61 73   ss....objectClas
  0060:  73 a4 0b 04 02 63 6e 30  05 80 03 64 65 70 30 03   s....cn0...dep0.
  0070:  04 01 2b                                           ..+
ber_scanf fmt ({) ber:
ber_dump: buf=0x0826e568 ptr=0x0826e56d end=0x0826e5db len=110
  0000:  63 6c 04 27 6f 75 3d xx  xx xx xx xx xx xx xx xx   cl.'ou=xxxxxxxxx
  0010:  xx xx xx xx 2c 64 63 3d  xx xx xx xx xx 2c 64 63   rity,dc=xxxxx,dc
  0020:  3d xx xx xx 2c 64 63 3d  63 6f 6d 0a 01 01 0a 01   =xxx,dc=com.....
  0030:  00 02 02 01 f4 02 02 0e  10 01 01 00 a0 2b a2 0d   .............+..
  0040:  87 0b 6f 62 6a 65 63 74  43 6c 61 73 73 a2 0d 87   ..objectClass...
  0050:  0b 6f 62 6a 65 63 74 43  6c 61 73 73 a4 0b 04 02   .objectClass....
  0060:  63 6e 30 05 80 03 64 65  70 30 03 04 01 2b         cn0...dep0...+
ber_flush: 115 bytes to sd 10
  0000:  30 71 02 01 02 63 6c 04  27 6f 75 3d xx xx xx xx   0q...cl.'ou=xxxx
  0010:  xx xx xx xx xx xx xx xx  xx 2c 64 63 3d xx xx xx   xxxxxxxxx,dc=xxx
  0020:  xx xx 2c 64 63 3d xx xx  xx 2c 64 63 3d 63 6f 6d   xx,dc=xxx,dc=com
  0030:  0a 01 01 0a 01 00 02 02  01 f4 02 02 0e 10 01 01   ................
  0040:  00 a0 2b a2 0d 87 0b 6f  62 6a 65 63 74 43 6c 61   ..+....objectCla
  0050:  73 73 a2 0d 87 0b 6f 62  6a 65 63 74 43 6c 61 73   ss....objectClas
  0060:  73 a4 0b 04 02 63 6e 30  05 80 03 64 65 70 30 03   s....cn0...dep0.
  0070:  04 01 2b                                           ..+
ldap_write: want=115, written=115
  0000:  30 71 02 01 02 63 6c 04  27 6f 75 3d xx xx xx xx   0q...cl.'ou=xxxx
  0010:  xx xx xx xx xx xx xx xx  xx 2c 64 63 3d xx xx xx    Security,dc=ftb
  0020:  xx xx 2c 64 63 3d xx xx  xx 2c 64 63 3d 63 6f 6d   co,dc=ftn,dc=com
  0030:  0a 01 01 0a 01 00 02 02  01 f4 02 02 0e 10 01 01   ................
  0040:  00 a0 2b a2 0d 87 0b 6f  62 6a 65 63 74 43 6c 61   ..+....objectCla
  0050:  73 73 a2 0d 87 0b 6f 62  6a 65 63 74 43 6c 61 73   ss....objectClas
  0060:  73 a4 0b 04 02 63 6e 30  05 80 03 64 65 70 30 03   s....cn0...dep0.
  0070:  04 01 2b                                           ..+
conn=0 op=1 <<< meta_back_search_start[0]=1
ldap_msgfree
ldap_result ld 0x8264ca8 msgid 2
ldap_chkResponseList ld 0x8264ca8 msgid 2 all 2
ldap_chkResponseList returns ld 0x8264ca8 NULL
wait4msg ld 0x8264ca8 msgid 2 (timeout 100000 usec)
wait4msg continue ld 0x8264ca8 msgid 2 all 2
** ld 0x8264ca8 Connections:
* host: server.subdomain.domain.com  port: 389  (default)
  refcnt: 2  status: Connected
  last used: Thu Aug 23 14:45:47 2007

** ld 0x8264ca8 Outstanding Requests:
 * msgid 2,  origid 2, status InProgress
   outstanding referrals 0, parent count 0
** ld 0x8264ca8 Response Queue:
   Empty
ldap_chkResponseList ld 0x8264ca8 msgid 2 all 2
ldap_chkResponseList returns ld 0x8264ca8 NULL
ldap_int_select
read1msg: ld 0x8264ca8 msgid 2 all 2
ber_get_next
ldap_read: want=8, got=8
  0000:  30 84 00 00 00 a7 02 01                            0.......
ldap_read: want=165, got=165
  0000:  02 65 84 00 00 00 9e 0a  01 01 04 00 04 84 00 00   .e..............
  0010:  00 93 30 30 30 30 30 30  30 30 3a 20 4c 64 61 70   ..00000000: Ldap
  0020:  45 72 72 3a 20 44 53 49  44 2d 30 43 30 39 30 36   Err: DSID-0C0906
  0030:  32 37 2c 20 63 6f 6d 6d  65 6e 74 3a 20 49 6e 20   27, comment: In
  0040:  6f 72 64 65 72 20 74 6f  20 70 65 72 66 6f 72 6d   order to perform
  0050:  20 74 68 69 73 20 6f 70  65 72 61 74 69 6f 6e 20    this operation
  0060:  61 20 73 75 63 63 65 73  73 66 75 6c 20 62 69 6e   a successful bin
  0070:  64 20 6d 75 73 74 20 62  65 20 63 6f 6d 70 6c 65   d must be comple
  0080:  74 65 64 20 6f 6e 20 74  68 65 20 63 6f 6e 6e 65   ted on the conne
  0090:  63 74 69 6f 6e 2e 2c 20  64 61 74 61 20 30 2c 20   ction., data 0,
  00a0:  76 65 63 65 00                                     vece.
ber_get_next: tag 0x30 len 167 contents:
ber_dump: buf=0x0826d138 ptr=0x0826d138 end=0x0826d1df len=167
  0000:  02 01 02 65 84 00 00 00  9e 0a 01 01 04 00 04 84   ...e............
  0010:  00 00 00 93 30 30 30 30  30 30 30 30 3a 20 4c 64   ....00000000: Ld
  0020:  61 70 45 72 72 3a 20 44  53 49 44 2d 30 43 30 39   apErr: DSID-0C09
  0030:  30 36 32 37 2c 20 63 6f  6d 6d 65 6e 74 3a 20 49   0627, comment: I
  0040:  6e 20 6f 72 64 65 72 20  74 6f 20 70 65 72 66 6f   n order to perfo
  0050:  72 6d 20 74 68 69 73 20  6f 70 65 72 61 74 69 6f   rm this operatio
  0060:  6e 20 61 20 73 75 63 63  65 73 73 66 75 6c 20 62   n a successful b
  0070:  69 6e 64 20 6d 75 73 74  20 62 65 20 63 6f 6d 70   ind must be comp
  0080:  6c 65 74 65 64 20 6f 6e  20 74 68 65 20 63 6f 6e   leted on the con
  0090:  6e 65 63 74 69 6f 6e 2e  2c 20 64 61 74 61 20 30   nection., data 0
  00a0:  2c 20 76 65 63 65 00                               , vece.
read1msg: ld 0x8264ca8 msgid 2 message type search-result
ber_scanf fmt ({eaa) ber:
ber_dump: buf=0x0826d138 ptr=0x0826d13b end=0x0826d1df len=164
  0000:  65 84 00 00 00 9e 0a 01  01 04 00 04 84 00 00 00   e...............
  0010:  93 30 30 30 30 30 30 30  30 3a 20 4c 64 61 70 45   .00000000: LdapE
  0020:  72 72 3a 20 44 53 49 44  2d 30 43 30 39 30 36 32   rr: DSID-0C09062
  0030:  37 2c 20 63 6f 6d 6d 65  6e 74 3a 20 49 6e 20 6f   7, comment: In o
  0040:  72 64 65 72 20 74 6f 20  70 65 72 66 6f 72 6d 20   rder to perform
  0050:  74 68 69 73 20 6f 70 65  72 61 74 69 6f 6e 20 61   this operation a
  0060:  20 73 75 63 63 65 73 73  66 75 6c 20 62 69 6e 64    successful bind
  0070:  20 6d 75 73 74 20 62 65  20 63 6f 6d 70 6c 65 74    must be complet
  0080:  65 64 20 6f 6e 20 74 68  65 20 63 6f 6e 6e 65 63   ed on the connec
  0090:  74 69 6f 6e 2e 2c 20 64  61 74 61 20 30 2c 20 76   tion., data 0, v
  00a0:  65 63 65 00                                        ece.
read1msg: ld 0x8264ca8 0 new referrals
read1msg:  mark request completed, ld 0x8264ca8 msgid 2
request done: ld 0x8264ca8 msgid 2
res_errno: 0, res_error: <>, res_matched: <>
ldap_free_request (origid 2, msgid 2)
ldap_free_connection 0 1
ldap_free_connection: refcnt 1
ldap_parse_result
ber_scanf fmt ({iaa) ber:
ber_dump: buf=0x0826d138 ptr=0x0826d13b end=0x0826d1df len=164
  0000:  65 84 00 00 00 9e 0a 01  01 04 00 04 84 00 00 00   e...............
  0010:  93 30 30 30 30 30 30 30  30 3a 20 4c 64 61 70 45   .00000000: LdapE
  0020:  72 72 3a 20 44 53 49 44  2d 30 43 30 39 30 36 32   rr: DSID-0C09062
  0030:  37 2c 20 63 6f 6d 6d 65  6e 74 3a 20 49 6e 20 6f   7, comment: In o
  0040:  72 64 65 72 20 74 6f 20  70 65 72 66 6f 72 6d 20   rder to perform
  0050:  74 68 69 73 20 6f 70 65  72 61 74 69 6f 6e 20 61   this operation a
  0060:  20 73 75 63 63 65 73 73  66 75 6c 20 62 69 6e 64    successful bind
  0070:  20 6d 75 73 74 20 62 65  20 63 6f 6d 70 6c 65 74    must be complet
  0080:  65 64 20 6f 6e 20 74 68  65 20 63 6f 6e 6e 65 63   ed on the connec
  0090:  74 69 6f 6e 2e 2c 20 64  61 74 61 20 30 2c 20 76   tion., data 0, v
  00a0:  65 63 65 00                                        ece.
ber_scanf fmt (}) ber:
ber_dump: buf=0x0826d138 ptr=0x0826d1df end=0x0826d1df len=0

[rw] matchedDN: "" -> ""
ldap_err2string
conn=0 op=1 meta_back_search[0] match="" err=1 (Operations error).
ldap_msgfree
>>> dnPretty: <>
<<< dnPretty: <>
send_ldap_result: conn=0 op=1 p=3
send_ldap_result: err=1 matched="" text=""
send_ldap_response: msgid=2 tag=101 err=1
ber_flush: 14 bytes to sd 9
  0000:  30 0c 02 01 02 65 07 0a  01 01 04 00 04 00         0....e........
ldap_write: want=14, written=14
  0000:  30 0c 02 01 02 65 07 0a  01 01 04 00 04 00         0....e........
conn=0 op=1 SEARCH RESULT tag=101 err=1 nentries=0 text=
daemon: activity on 1 descriptor
daemon: activity on: 9r
daemon: read active on 9
connection_get(9)
connection_get(9): got connid=0
connection_read(9): checking for input on id=0
ber_get_next
ldap_read: want=8, got=7
  0000:  30 05 02 01 03 42 00                               0....B.
ber_get_next: tag 0x30 len 5 contents:
ber_dump: buf=0x0826cf98 ptr=0x0826cf98 end=0x0826cf9d len=5
  0000:  02 01 03 42 00                                     ...B.
ber_get_next
ldap_read: want=8, got=0

ber_get_next on fd 9 failed errno=0 (Success)
connection_read(9): input error=-2 id=0, closing.
connection_closing: readying conn=0 sd=9 for close
connection_close: deferring conn=0 sd=9
daemon: epoll: listen=7 active_threads=0 tvp=NULL
daemon: epoll: listen=8 active_threads=0 tvp=NULL
daemon: activity on 1 descriptor
daemon: activity on:
daemon: epoll: listen=7 active_threads=0 tvp=NULL
daemon: epoll: listen=8 active_threads=0 tvp=NULL
do_unbind
conn=0 op=2 UNBIND
connection_resched: attempting closing conn=0 sd=9
connection_close: conn=0 sd=9
=>meta_back_conn_destroy: fetching conn=0 DN=""
daemon: removing 9
conn=0 fd=9 closed

Follow-Ups:
- Re: successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy
  - From: Pierangelo Masarati <ando@sys-net.it>

References:
- successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy
  - From: "DePriest, Jason R." <jrdepriest@gmail.com>
- Re: successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy
  - From: Pierangelo Masarati <ando@sys-net.it>
- Re: successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy
  - From: "DePriest, Jason R." <jrdepriest@gmail.com>
- Re: successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy
  - From: Pierangelo Masarati <ando@sys-net.it>
- Re: successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy
  - From: "DePriest, Jason R." <jrdepriest@gmail.com>
- Re: successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy
  - From: Pierangelo Masarati <ando@sys-net.it>

Prev by Date: Re: slapo-dynlist search member=value search?
Next by Date: Re: successful ldapsearch -- need to turn it into a working slapd configuration for an LDAP proxy
Index(es):
- Chronological
- Thread