[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#8724) slapo-pcache truncates remote results



Full_Name: Adam Heath
Version: 2.4.44
OS: debian stretch
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (99.146.168.62)


I have configured slapd to proxy to a remote server.

Using ldapsearch, I can talk directly to that remote server, and using the
pr=200/noprompt option, I get back 2900 results.

Pointing ldapsearch at localhost, *without* pcache, I get the same set of
results(pages, and the final count is correct).

When I enabled slapo-pcache, with *no* attribute sets, then the paging options
are removed, and I get only 2000 results(the max-size from the remote server).

Command: docker exec -ti caching-ad ldapsearch -E pr=200/noprompt -o
ldif-wrap=no -z none -w 'XXXX' -b 'XXXX' -D 'XXXX' '(objectclass=group)' dn -h
localhost|grep -A 5 '# search result'

slapd.conf:
==
egrep -v '^(#|$)' ../app-hosting/brainfood-docker-image-recipes/openldap/files/caching-slapd.conf
include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
attributetype ( 1.2.840.113556.1.4.221
      NAME 'sAMAccountName'
      SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
      SINGLE-VALUE )
pidfile         /var/run/slapd/slapd.pid
argsfile        /var/run/slapd/slapd.args
loglevel        none
modulepath      /usr/lib/ldap
moduleload      back_ldap.la
moduleload      back_hdb.la
moduleload      back_bdb.la
moduleload      rwm
moduleload      pcache.la
moduleload memberof.la
sizelimit 5000
tool-threads 1
backend         ldap
readonly        yes
database ldap
protocol-version  3
rebind-as-user
norefs  yes
chase-referrals no
uri "ldap://192.168.178.2:389";
suffix          "dc=ldap01,dc=com"
rootdn          "cn=admin,dc=ldap01,dc=com"
rootpw          "foobar"
overlay memberof
overlay       pcache
proxyCache    hdb 100000 3 1000 100
pcachePersist TRUE
cachesize     200
directory     /var/lib/ldap
==

I expect pcache to not truncate the results from the remote server.