Re: (ITS#8973) Error with domainScope control when using C# LDAP API

[hyc@symas.com]

clement.oudot@worteks.com wrote:
> Full_Name: Clement OUDOT
> Version: 2.4.47
> OS: GNU/Linux
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (81.250.130.213)
> 
> 
> Hello,
> 
> after upgrading from 2.4.46 to 2.4.47, this C# code does not work anymore :

The code in controls.c is correct. The DomainScope control does not take a value,
so the value is required to be NULL.

> ----
> $auth = [System.DirectoryServices.AuthenticationTypes]::FastBind
> $de = New-Object System.DirectoryServices.DirectoryEntry($DN,$userReferentiel,
> $passwordReferentiel, $auth)
> ----
> 
> The log in OpenLDAP 2.4.47 :
> ----
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 fd=17 ACCEPT from
> IP=10.10.2.163:47304 (IP=0.0.0.0:390)
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=0 BIND
> dn="uid=ADPassword,ou=configuration,dc=referentiel,dc=local" method=128
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=0 BIND
> dn="uid=ADPassword,ou=configuration,dc=referentiel,dc=local" mech=SIMPLE ssf=0
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=0 RESULT tag=97 err=0 text=
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=1 SRCH
> base="dc=referentiel,dc=local" scope=0 deref=0 filter="(objectClass=*)" 
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=1 SRCH attr=objectClass
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=1 SEARCH RESULT tag=101 err=0
> nentries=1 text=
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=2 SRCH base="" scope=0
> deref=0 filter="(objectClass=*)" 
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=2 SRCH attr=subschemaSubentry
> dsServiceName namingContexts defaultNamingContext schemaNamingContext
> configurationNamingContext rootDomainNamingContext supportedControl
> supportedLDAPVersion supportedLDAPPolicies supportedSASLMechanisms dnsHostName
> ldapServiceName serverName supportedCapabilities
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=2 SEARCH RESULT tag=101 err=0
> nentries=1 text=
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=3 SEARCH RESULT tag=101 err=2
> nentries=0 text=domainScope control value not absent
> Feb  5 18:21:03 anteros slapd[30762]: conn=1577 op=3 do_search: get_ctrls
> failed
> ----
> 
> The behavior change is related to the fix of ITS#8840 :
> www.openldap.org/its/index.cgi/Software Bugs?id=8840
> 
> I did not see how to change the C# code, are we sure that the fix of ITS#8840 is
> valid?
> 
> 


-- 
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/