[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#3951) send_search_entry() issue when determining whether an attribute is to be returned or not



Full_Name: Pierangelo Masarati
Version: HEAD
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (81.72.89.40)
Submitted by: ando


I bumped into this issue when trying to proxy data thta is not in the proxy's
schema, but I believe it's a general issue (although of limited scope).

How to reproduce:
- set up a remote server
- set up a proxy whose schema is a subset of that of the remote server
- run a search that returns an entry containing attributes not defined on the
proxy

if the search doesn't specify any attribute list, those attributes don't show up
in the result.  This is correct (althoug I'd prefer to revert it) because those
attributes get marked as "undefined", whose usage is dsaOperation.

However, if the search specifies '+', they don't show up as well

Finally, if one specifies '*' they do show up.

This is incorrect.  The problem is in ad_inlist(), which doesn't recognizes the
AttributeName "*" as allUserAttrs and attaches to its AttributeName the first
"undefined" attribute description available.  I'm working at a fix.

p.