Referral chasing mistery

[Konstantin Chuguev <Konstantin.Chuguev@dante.org.uk>]

Hi All,

Something seems wrong in chasing referrals in OpenLDAP's libldap.

There is an entry in the LDAP server of UNINETT:
# ldapsearch -H ldap://ldap.uninett.no:389 -s base -b dc=hil,dc=no -x -M
\
    'objectclass=*' '*' ref
version: 2

#
# filter: objectclass=*
# requesting: * ref
# with manageDSAit control
#

# hil, no
dn: dc=hil, dc=no
objectClass: referral
ref: ldap://domino2.hil.no/?

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

Now let's disable manage DSA IT control:
# ldapsearch -H ldap://ldap.uninett.no:389 -s base -b dc=hil,dc=no -x
version: 2

#
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 10 Referral
matchedDN: dc=hil, dc=no
ref: ldap://domino2.hil.no/?

# numResponses: 1

Everything's been fine so far. Let's check the referenced server now:
# ldapsearch -H ldap://domino2.hil.no:389 -s base -b '' -x
version: 2

#
# filter: (objectclass=*)
# requesting: ALL
#

#
dn:
objectclass: top
subschemasubentry: cn=schema
namingcontexts:: AA==
supportedextension: 1.3.6.1.4.1.1466.20037
supportedextension: LanguageCodes
supportedsaslmechanisms: EXTERNAL
supportedldapversion: 3
supportedldapversion: 2

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

Fine again. Let's finally ask the the client to chase the referral from
the first server:
# ldapsearch -H ldap://ldap.uninett.no:389 -s base -b dc=hil,dc=no -x -C

version: 2

#
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

# numResponses: 1

This is completely beyond me. According to RFC2255, the question mark in
the reference URL is harmless in this case.
Any ideas?

Regards,
    Konstantin.

--
          * *        Konstantin Chuguev - Application Engineer
       *      *              Francis House, 112 Hills Road
     *                       Cambridge CB2 1PQ, United Kingdom
 D  A  N  T  E       WWW:    http://www.dante.net