syncrepl vs is_entry_objectclass "2.5.17.0" no objectClass attribute

[<Guy.Baconniere@swisscom.com>]

Hello,

 

A syncrepl with a searchbase of "dc=foo,dc=bar" is working fine but

not with a empty/null "" searchbase. On the provider side I have the

following error "is_entry_objectclass("", "2.5.17.0") no objectClass attribute"

and on the consumer I have "do_syncrep2: rid=002 (32) No such object".

 

ldapsearch -LLL -h foo.bar -p 389 -x -D 'cn=syncrepl,dc=foo,dc=bar' -w '*****' -b '' -s sub '(objectclass=*)' '*' '+'

Do not have any issue to retrieve the full DIT(s) and is able to find the

sub of root object.

 

Is it possible to replicate an null/empty searchbase with syncrepl ?

 

If not how can I replicate part of a null/empty searchbase setup on a provider ?

 

Best Regards,

Guy Baconniere

 

I am running OpenLDAP slapd 2.4.11 on Debian Lenny.

 

# syncrepl directives
syncrepl rid=002
   provider=ldap://foo.bar:389/
   searchbase=""
   filter="(objectClass=*)"
   scope=sub
   attrs="*,+"
   type=refreshAndPersist
   schemachecking=off
   retry="60 30 300 +"
   bindmethod=simple
   binddn="cn=syncrepl,dc=foo,dc=bar"
   credentials="*****"

 

SYNCREPL OF SEARCHBASE="" NOT WORKING
conn=1443 fd=33 ACCEPT from IP=172.16.8.204:44128 (IP=0.0.0.0:389)
conn=1443 op=0 BIND dn="cn=syncrepl,dc=foo,dc=bar" method=128
conn=1443 op=0 BIND dn="cn=syncrepl,dc=foo,dc=bar" mech=SIMPLE ssf=0
conn=1443 op=0 RESULT tag=97 err=0 text=
conn=1442 op=1 SRCH base="" scope=2 deref=0 filter="(objectClass=*)"
conn=1442 op=1 SRCH attr=* +
is_entry_objectclass("", "2.5.17.0") no objectClass attribute
conn=1442 op=1 SEARCH RESULT tag=101 err=32 nentries=0 text=
conn=1443 op=1 SRCH base="dc=foo,dc=bar" scope=2 deref=0 filter="(objectClass=*)"
conn=1443 op=1 SRCH attr=* +
conn=1442 op=2 UNBIND
conn=1442 fd=24 closed

 

do_syncrep2: rid=002 LDAP_RES_SEARCH_RESULT
do_syncrep2: rid=002 (32) No such object
do_syncrepl: rid=002 retrying (29 retries left)

LDAPSEARCH IS ABLE TO RETRIEVE SEARCHBASE ""

ldapsearch -LLL -h foo.bar -p 389 -x -D 'cn=syncrepl,dc=foo,dc=bar' -w '*****' -b '' -s sub '(objectclass=*)' '*' '+'
conn=1441 fd=24 ACCEPT from IP=127.0.0.1:47269 (IP=0.0.0.0:389)
conn=1441 op=0 BIND dn="cn=syncrepl,dc=foo,dc=bar" method=128
conn=1441 op=0 BIND dn="cn=syncrepl,dc=foo,dc=bar" mech=SIMPLE ssf=0
conn=1441 op=0 RESULT tag=97 err=0 text=
conn=1441 op=1 SRCH base="" scope=2 deref=0 filter="(objectClass=*)"
conn=1441 op=1 SRCH attr=* +