alias

[Jehan PROCACCIA <jehan.procaccia@int-evry.fr>]

I runned a test to use the alias objectclass. however an ldapsearch on
an entry containing the aliasedObjectName attribute did not returned the
attributes from the entry pointed by that aliasedObjectName dn !?. I am
misusing/misunderstanding the role of the alias objectclass ? is there
something to do on the server itself to enable the use ("following") of
aliases ? 

Thanks a lot for your help .

Here's the DIT I runned the test on:

-dc=int-evry,dc=fr
	-adm
	  -eph
	   -staff-eph
	    - administrative information about the person (1)
	-services
	  -unix
	   - unix account(2) (with attributes from posix and shadow account)
	  -mail
	   - mail information (3) (rfc822 ...)

here's what le leafs (1,2,3) of the above DIT contains

(1) # Jean-Pierre LEVREY,Staff-Eph,Eph,Adm,dc=int-evry,dc=fr
dn: cn=Jean-Pierre LEVREY,ou=Staff-Eph,ou=Eph,ou=Adm,dc=int-evry,dc=fr
objectClass: person
objectClass: organizationalPerson
cn: Jean-Pierre LEVREY
sn: LEVREY
telephoneNumber: 01 60 76
title: Maitre de conf

(2) # levrey,Unix,Services,dc=int-evry,dc=fr
dn: uid=levrey,ou=Unix,ou=Services,dc=int-evry,dc=fr
uid: levrey
cn: J-P Levrey
objectClass: organizationalUnit
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
objectClass: alias
aliasedObjectName: cn=Jean-Pierre
LEVREY,ou=Staff-Eph,ou=Eph,ou=Adm,dc=int-evr
 y,dc=fr
ou: unix-eph
shadowLastChange: 11277
loginShell: /usr/local/bin/tcsh
uidNumber: 14521
gidNumber: 145
homeDirectory: /mci/eph/leverey
gecos: JP Leverey EPH
userPassword:: e2NyeXBQfWdkUVZkb1dhcmptQkU=

(3) # levrey,Mail,Services,dc=int-evry,dc=fr
dn: rfc822ForwardingMailbox=levrey,ou=Mail,ou=Services,dc=int-evry,dc=fr
objectClass: organizationalUnit
objectClass: rfc822Delivery
objectClass: top
objectClass: alias
aliasedObjectName: cn=Jean-Pierre
LEVREY,ou=Staff-Eph,ou=Eph,ou=Adm,dc=int-evr
 y,dc=fr
ou: Mail
mailAcceptingGeneralID: jean-pierre.LEVREY
rfc822ForwardingMailbox: levrey

When I run an ldapsearch on the unix account (2), I get what I entered
in the original ldif file to create the entry, but not at all the
attributes from the entry pointed by the aliasedObjectname dn , cf
below. When I select only the "title" attribute (attribute present in 1)
to be shown from the ldapsearch, i get nothing :-( proving that the
alias seems useless !!?

$ldapsearch -h servfax -p 9999 -b"dc=int-evry,dc=fr" -s sub -x 
"(uid=levre*)" -a never
version: 2

#
# filter: (uid=levre*)
# requesting: ALL
#

# levrey,Unix,Services,dc=int-evry,dc=fr
dn: uid=levrey,ou=Unix,ou=Services,dc=int-evry,dc=fr
uid: levrey
cn: J-P Levrey
objectClass: organizationalUnit
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
objectClass: alias
aliasedObjectName: cn=Jean-Pierre
LEVREY,ou=Staff-Eph,ou=Eph,ou=Adm,dc=int-evr
 y,dc=fr
ou: unix-eph
shadowLastChange: 11277
loginShell: /usr/local/bin/tcsh
uidNumber: 14521
gidNumber: 145
homeDirectory: /mci/eph/leverey
gecos: JP Leverey EPH
userPassword:: e2NyeXB0fWdkUVZkb1dhcmptQkU=

Thanks.

PS: ldapsearch returns "version: 2" even with the option -P 3 , how run
all this on V3 ?

-- 
Jehan Procaccia
Institut National des Telecommunications| Email:
Jehan.Procaccia@int-evry.fr 
MCI, Moyens Communs Informatiques	| Tel  : +33 (0) 160764436 
9 rue Charles Fourier 91011 Evry France | Fax  : +33 (0) 160764321