[Date Prev][Date Next]
Null suffix as default (ITS#723)
Full_Name: Pierangelo Masarati
Submission from: (NULL) (220.127.116.11)
In OpenLDAP 1.2 and earlier I could set an ldbm backend suffix as:
suffix "o=My Org,c=IT"
and this used to allow to operate searches on the backend with a null search
ldapsearch -b "" objectclass=*
would yield all the entries with base "o=My Org,c=IT"
This is no longer true in OpenLDAP 2.0; I temporarily fixed the problem with
the patch you may find at
by adding a configuration directive
defaultSuffix "o=My Org,c=IT"
which allows to substitute a null ("") search base with the default one (it is
by adding --enable-default-suffix-hack at configure time). This feature is key
application, because I should otherwise reconfigure some 25,000 clients which
work with a "" base on a directory with non-null suffix.
The point is: was the feature I mentioned intended in OpenLDAP 1.2 or was it
a bug? And in case it was intended, why isn't it supported any longer in
If my patch seems reasonable, feel free to use it; there is no copyright notice
since it is nothing but a few lines of code. If you need one, let me know.
Bye, Pierangelo Masarati