[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: (ITS#5768) [enhancement] add support for Dereference Control
Andrew Bartlett wrote:
> On Thu, 2008-10-23 at 00:15 +0200, Pierangelo Masarati wrote:
>> A tentative implementation is in HEAD, please test. You need to:
>
> Thankyou very much. I downloaded CVS HEAD and tested it out (finally -
> the Samba4 side of the implementation took far longer than I expected).
>
>> - configure as --enable-deref
>>
>> - enable the "deref" overlay in slapd, with "overlay deref" (doesn't
>> work as global overlay yet, sorry).
>
> This is something Samba4 will need, as many of our links are
> cross-database. But fixing this for a single DB is a big help in any
> case.
>
>> - run searches like
>>
>> $ ldapsearch -x -b dc=example,dc=com -E 'deref=member:entryUUID'
>>
>> you'll see results like
>
> When using Samba4's client, it seems to work, but it is as if it extends
> the control to the full expected length, but not the data. Ie, attached
> this is the control response I got back from the 'make testenv'
> environment in Samba4. I've also attached the full LDAP request.
>
> The extra zeros also appear in the OpenLDAP logs (so it's not a Samba4
> parsing bug).
I've found the bug (erroneous manipulation of octet strings containing
'\0' octets). The objectSid is octet string-valued. Should be fixed
now; please test.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando@sys-net.it
-----------------------------------