[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#5768) [enhancement] add support for Dereference Control

Andrew Bartlett wrote:
> On Thu, 2008-10-23 at 00:15 +0200, Pierangelo Masarati wrote:
>> A tentative implementation is in HEAD, please test.  You need to:
> Thankyou very much.  I downloaded CVS HEAD and tested it out (finally -
> the Samba4 side of the implementation took far longer than I expected).
>> - configure as --enable-deref
>> - enable the "deref" overlay in slapd, with "overlay deref" (doesn't
>> work as global overlay yet, sorry).
> This is something Samba4 will need, as many of our links are
> cross-database.  But fixing this for a single DB is a big help in any
> case.
>> - run searches like
>> $ ldapsearch -x -b dc=example,dc=com -E 'deref=member:entryUUID'
>> you'll see results like
> When using Samba4's client, it seems to work, but it is as if it extends
> the control to the full expected length, but not the data.  Ie, attached
> this is the control response I got back from the 'make testenv'
> environment in Samba4.  I've also attached the full LDAP request.
> The extra zeros also appear in the OpenLDAP logs (so it's not a Samba4
> parsing bug).

I've found the bug (erroneous manipulation of octet strings containing 
'\0' octets).  The objectSid is octet string-valued.  Should be fixed 
now; please test.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it