[Date Prev][Date Next] [Chronological] [Thread] [Top]

index objectClass eq breaks my lookups



Hi,

I am sending this to the list before filing a bug, because I am not 100% sure 
if this is not a misconfiguration item, anyway:

I encountered a very strange bug, which actually broke my whole system:

after modifying the index lines in slapd.conf, lookups by different services 
failed.

ldapsearch '(uid=some-uid)' didnt return the entry, while
ldapsearch '(uid=some-uid*)' did return exactly the dn: uid=some-uid,ou=... 
entry.

I found out that this behaviour shows up when maintaining

index   objectClass   eq

even though I cant think of _any_ reason why an objectClass index would crash 
a lookup on uids.
my index lines:

# Indices to maintain
index   default                 pres,eq
index   uid,uidNumber,rid
index   cn,sn                   eq,pres,sub
#index  objectClass
^^^ if I uncomment this, the above described effect shows up

Any clue?
Since the documentation explicitly encourages one to maintain the objectClass 
eq index, I dont think this is a misconfiguration issue (I hope so..)

regards
Markus

find my slapd.conf below:
-------
argentum LDAP # egrep ^[^#].* /etc/openldap/slapd.conf
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/corba.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/java.schema
include         /etc/openldap/schema/krb5-kdc.schema
include         /etc/openldap/schema/misc.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/openldap.schema
include         /etc/openldap/schema/puli.schema
include         /etc/openldap/schema/samba.schema
password-hash {crypt}
TLSCertificateFile /etc/ssl/certs/ldap/ldap.cert.pem
TLSCertificateKeyFile /etc/ssl/certs/ldap/ldap.key.pem
TLSCACertificateFile /etc/ssl/mrmadcowCA/cacert.pem
pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args
access to attribute=userPassword
        by dn="cn=Manager,o=mrmadcow" write
        by anonymous auth
        by self write
        by * none
access to attrs=lmPassword,ntPassword
        by dn="cn=sambaadmin,o=mrmadcow" write
        by dn="cn=Manager,o=mrmadcow" write
        by self write
        by * none
access to *
        by dn="cn=Manager,o=mrmadcow" write
        by dn="cn=sambaadmin,o=mrmadcow" write
        by self write
        by * read

database        ldbm
suffix          "o=mrmadcow"
rootdn          "cn=Manager,o=mrmadcow"
directory       /var/lib/openldap-ldbm
index   default                 pres,eq
index   uid,uidNumber,rid
index   cn,sn                   eq,pres,sub

-- 
 ___________________________________
( Markus Rippl, markus.rippl@gmx.de )
( This email has Super Cow Powers.  )
 -----------------------------------
        o   ^__^
         o  (..)\_______
            (__)\       )\/\
                ||----w |
                ||     ||

Attachment: pgppbMfes3XTd.pgp
Description: signature