Logged in as guest
Viewing Archive.Software Bugs/2522 Full headers
Major security issue: yes no
Notes: user reports problem not resolved fixed in HEAD fixed in re21 Notification:
Date: Thu, 15 May 2003 23:24:47 GMT From: jemiller@uchicago.edu To: openldap-its@OpenLDAP.org Subject: (uid=*) search filter returns no entries
Full_Name: Jonathan Eric Miller Version: 2.1.19 OS: Solaris 8 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (128.135.99.79) If I do a search using a filter of "(uid=*)", no entries are returned. The following example demonstrates. # ldapsearch '(uid=*)' dn # extended LDIF # # LDAPv3 # base <> with scope sub # filter: (uid=*) # requesting: dn # # search result search: 2 result: 0 Success # numResponses: 1 However, if I do a search that includes a character before the "*" such as "(uid=j*)", it does return entries. The following example demonstrates. # ldapsearch '(uid=j*)' dn # extended LDIF # # LDAPv3 # base <> with scope sub # filter: (uid=j*) # requesting: dn # # jemiller, People, uchicago.edu dn: uid=jemiller,ou=People,dc=uchicago,dc=edu # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 Note, this problem doesn't occur with OpenLDAP 2.1.11, but, does with OpenLDAP 2.1.19. Note, I reloaded my directory from an LDIF file to make sure the database files weren't corrupted. Can anyone else reproduce this?
From: "Howard Chu" <hyc@highlandsun.com> To: <jemiller@uchicago.edu>, <openldap-its@OpenLDAP.org> Subject: RE: (uid=*) search filter returns no entries (ITS#2522) Date: Thu, 15 May 2003 17:09:40 -0700
Thanks, this bug was reported in ITS#2507 and the fix is already in CVS. The fix will be in release 2.1.20. This ITS will be closed. -- Howard Chu Chief Architect, Symas Corp. Director, Highland Sun http://www.symas.com http://highlandsun.com/hyc Symas: Premier OpenSource Development and Support > -----Original Message----- > From: owner-openldap-bugs@OpenLDAP.org > [mailto:owner-openldap-bugs@OpenLDAP.org]On Behalf Of jemiller@uchicago.edu > Full_Name: Jonathan Eric Miller > Version: 2.1.19 > OS: Solaris 8 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (128.135.99.79) > > > If I do a search using a filter of "(uid=*)", no entries are > returned. The > following example demonstrates.
From: "Jonathan Eric Miller" <jemiller@uchicago.edu> To: <openldap-its@OpenLDAP.org> Cc: <hyc@highlandsun.com> Subject: Re: (uid=*) search filter returns no entries (ITS#2522) Date: Wed, 21 May 2003 12:01:26 -0500
Howard Chu wrote me and told me that this bug is a duplicate of ITS#2507. I just tested again with OpenLDAP 2.1.20 and found that the bug may only be partly fixed. For example, if I do a, ldapsearch '(uid=*)' it now works. i.e. it returns entries whereas before it didn't return anything. This also works. ldapsearch '(uid=swilson)' However, this doesn't work. ldapsearch '(&(uid=*)(uid=swilson))' It doesn't return any entries. This query worked in OpenLDAP 2.1.11. Jon ----- Original Message ----- From: <openldap-its@OpenLDAP.org> To: <jemiller@uchicago.edu> Sent: Thursday, May 15, 2003 6:24 PM Subject: Re: (uid=*) search filter returns no entries (ITS#2522) > > *** THIS IS AN AUTOMATICALLY GENERATED REPLY *** > > Thanks for your report to the OpenLDAP Issue Tracking System. Your > report has been assigned the tracking number ITS#2522. > > One of our support engineers will look at your report in due course. > Note that this may take some time because our support engineers > are volunteers. They only work on OpenLDAP when they have spare > time. > > If you need to provide additional information in regards to your > issue report, you may do so by replying to this message. Note that > any mail sent to openldap-its@openldap.org with (ITS#2522) > in the subject will automatically be attached to the issue report. > > mailto:openldap-its@openldap.org?subject=(ITS#2522) > > You may follow the progress of this report by loading the following > URL in a web browser: > http://www.OpenLDAP.org/its/index.cgi?findid=2522 > > Please remember to retain your issue tracking number (ITS#2522) > on any further messages you send to us regarding this report. If > you don't then you'll just waste our time and yours because we > won't be able to properly track the report. > > Please note that the Issue Tracking System is not intended to > be used to seek help in the proper use of OpenLDAP Software. > Such requests will be closed. > > OpenLDAP Software is user supported. > http://www.OpenLDAP.org/support/ > > -------------- > Copyright 1999-2003 The OpenLDAP Foundation, All Rights Reserved. >
From: "Howard Chu" <hyc@highlandsun.com> To: <jemiller@uchicago.edu>, <openldap-its@OpenLDAP.org> Subject: RE: (uid=*) search filter returns no entries (ITS#2522) Date: Wed, 21 May 2003 12:38:38 -0700
I see the problem, thanks. One thing to note however, is this only fails when the particular attribute is not indexed. If you're doing a lot of these searches, you should be using an index on the relevant attribute. -- Howard Chu Chief Architect, Symas Corp. Director, Highland Sun http://www.symas.com http://highlandsun.com/hyc Symas: Premier OpenSource Development and Support > -----Original Message----- > From: owner-openldap-bugs@OpenLDAP.org > [mailto:owner-openldap-bugs@OpenLDAP.org]On Behalf Of > jemiller@uchicago.edu > Sent: Wednesday, May 21, 2003 10:00 AM > To: openldap-its@OpenLDAP.org > Subject: Re: (uid=*) search filter returns no entries (ITS#2522) > > > Howard Chu wrote me and told me that this bug is a duplicate > of ITS#2507. > > I just tested again with OpenLDAP 2.1.20 and found that the > bug may only be > partly fixed. For example, if I do a, > > ldapsearch '(uid=*)' > > it now works. i.e. it returns entries whereas before it didn't return > anything. > > This also works. > > ldapsearch '(uid=swilson)' > > However, this doesn't work. > > ldapsearch '(&(uid=*)(uid=swilson))' > > It doesn't return any entries. This query worked in OpenLDAP 2.1.11. > > Jon > > ----- Original Message ----- > From: <openldap-its@OpenLDAP.org> > To: <jemiller@uchicago.edu> > Sent: Thursday, May 15, 2003 6:24 PM > Subject: Re: (uid=*) search filter returns no entries (ITS#2522) > > > > > > *** THIS IS AN AUTOMATICALLY GENERATED REPLY *** > > > > Thanks for your report to the OpenLDAP Issue Tracking System. Your > > report has been assigned the tracking number ITS#2522. > > > > One of our support engineers will look at your report in due course. > > Note that this may take some time because our support engineers > > are volunteers. They only work on OpenLDAP when they have spare > > time. > > > > If you need to provide additional information in regards to your > > issue report, you may do so by replying to this message. Note that > > any mail sent to openldap-its@openldap.org with (ITS#2522) > > in the subject will automatically be attached to the issue report. > > > > mailto:openldap-its@openldap.org?subject=(ITS#2522) > > > > You may follow the progress of this report by loading the following > > URL in a web browser: > > http://www.OpenLDAP.org/its/index.cgi?findid=2522 > > > > Please remember to retain your issue tracking number (ITS#2522) > > on any further messages you send to us regarding this report. If > > you don't then you'll just waste our time and yours because we > > won't be able to properly track the report. > > > > Please note that the Issue Tracking System is not intended to > > be used to seek help in the proper use of OpenLDAP Software. > > Such requests will be closed. > > > > OpenLDAP Software is user supported. > > http://www.OpenLDAP.org/support/ > > > > -------------- > > Copyright 1999-2003 The OpenLDAP Foundation, All Rights Reserved. > > >
From: "Jonathan Eric Miller" <jemiller@uchicago.edu> To: "Howard Chu" <hyc@highlandsun.com>, <openldap-its@OpenLDAP.org> Subject: Re: (uid=*) search filter returns no entries (ITS#2522) Date: Wed, 21 May 2003 14:51:06 -0500
You're right. I added a pres index on uid and now it works (only had eq before). Thanks. Jon ----- Original Message ----- From: "Howard Chu" <hyc@highlandsun.com> To: <jemiller@uchicago.edu>; <openldap-its@OpenLDAP.org> Sent: Wednesday, May 21, 2003 2:38 PM Subject: RE: (uid=*) search filter returns no entries (ITS#2522) > I see the problem, thanks. One thing to note however, is this only fails when > the particular attribute is not indexed. If you're doing a lot of these > searches, you should be using an index on the relevant attribute. > > -- Howard Chu > Chief Architect, Symas Corp. Director, Highland Sun > http://www.symas.com http://highlandsun.com/hyc > Symas: Premier OpenSource Development and Support > > > -----Original Message----- > > From: owner-openldap-bugs@OpenLDAP.org > > [mailto:owner-openldap-bugs@OpenLDAP.org]On Behalf Of > > jemiller@uchicago.edu > > Sent: Wednesday, May 21, 2003 10:00 AM > > To: openldap-its@OpenLDAP.org > > Subject: Re: (uid=*) search filter returns no entries (ITS#2522) > > > > > > Howard Chu wrote me and told me that this bug is a duplicate > > of ITS#2507. > > > > I just tested again with OpenLDAP 2.1.20 and found that the > > bug may only be > > partly fixed. For example, if I do a, > > > > ldapsearch '(uid=*)' > > > > it now works. i.e. it returns entries whereas before it didn't return > > anything. > > > > This also works. > > > > ldapsearch '(uid=swilson)' > > > > However, this doesn't work. > > > > ldapsearch '(&(uid=*)(uid=swilson))' > > > > It doesn't return any entries. This query worked in OpenLDAP 2.1.11. > > > > Jon > > > > ----- Original Message ----- > > From: <openldap-its@OpenLDAP.org> > > To: <jemiller@uchicago.edu> > > Sent: Thursday, May 15, 2003 6:24 PM > > Subject: Re: (uid=*) search filter returns no entries (ITS#2522) > > > > > > > > > > *** THIS IS AN AUTOMATICALLY GENERATED REPLY *** > > > > > > Thanks for your report to the OpenLDAP Issue Tracking System. Your > > > report has been assigned the tracking number ITS#2522. > > > > > > One of our support engineers will look at your report in due course. > > > Note that this may take some time because our support engineers > > > are volunteers. They only work on OpenLDAP when they have spare > > > time. > > > > > > If you need to provide additional information in regards to your > > > issue report, you may do so by replying to this message. Note that > > > any mail sent to openldap-its@openldap.org with (ITS#2522) > > > in the subject will automatically be attached to the issue report. > > > > > > mailto:openldap-its@openldap.org?subject=(ITS#2522) > > > > > > You may follow the progress of this report by loading the following > > > URL in a web browser: > > > http://www.OpenLDAP.org/its/index.cgi?findid=2522 > > > > > > Please remember to retain your issue tracking number (ITS#2522) > > > on any further messages you send to us regarding this report. If > > > you don't then you'll just waste our time and yours because we > > > won't be able to properly track the report. > > > > > > Please note that the Issue Tracking System is not intended to > > > be used to seek help in the proper use of OpenLDAP Software. > > > Such requests will be closed. > > > > > > OpenLDAP Software is user supported. > > > http://www.OpenLDAP.org/support/ > > > > > > -------------- > > > Copyright 1999-2003 The OpenLDAP Foundation, All Rights Reserved. > > > > > >
From: "Howard Chu" <hyc@highlandsun.com> To: "'Jonathan Eric Miller'" <jemiller@uchicago.edu>, <openldap-its@OpenLDAP.org> Subject: RE: (uid=*) search filter returns no entries (ITS#2522) Date: Thu, 22 May 2003 00:27:57 -0700
> -----Original Message----- > From: Jonathan Eric Miller [mailto:jemiller@uchicago.edu] > > Howard Chu wrote me and told me that this bug is a duplicate > of ITS#2507. > > I just tested again with OpenLDAP 2.1.20 and found that the > bug may only be > partly fixed. For example, if I do a, > > ldapsearch '(uid=*)' > > it now works. i.e. it returns entries whereas before it didn't return > anything. > > This also works. > > ldapsearch '(uid=swilson)' > > However, this doesn't work. > > ldapsearch '(&(uid=*)(uid=swilson))' > > It doesn't return any entries. This query worked in OpenLDAP 2.1.11. This should now work for both indexed and non-indexed attributes in CVS HEAD. Also note that this kind of search filter is non-optimal - you're better off just using '(uid=swilson)' and saving the redundant (uid=*) filter evaluation. -- Howard Chu Chief Architect, Symas Corp. Director, Highland Sun http://www.symas.com http://highlandsun.com/hyc Symas: Premier OpenSource Development and Support
______________ © Copyright 2013, OpenLDAP Foundation, info@OpenLDAP.org
