Re: openldapRootDSE and solaris clients

[Igor Brezac <igor@ipass.net>]

On Tue, 11 May 2004, Greg Matthews wrote:

> On Tue, 2004-05-11 at 16:13, Igor Brezac wrote:
> > This was either a bug in 2.1.22 or you applied some patch.  I wrote one a
> > long time ago which is floating around the internet.
>
> the only patch I would have applied would be the fix for solaris case
> sensitivity.... snooping the traffic, solaris isnt actually specifying a
> list of attributes so thats not it.
>
> A quick look at another site that didnt have these problems:
>
> lafiles susa $ ldapsearch -xLLLVs base -b ""
> ldapsearch: @(#) $OpenLDAP: ldapsearch 2.1.25 (Feb 10 2004 13:39:19) $
>         susa@mtdbase:/scratch/openldap-2.1.25/clients/tools
>         (LDAP library: OpenLDAP 20124)
> dn:
> objectClass: top
> objectClass: OpenLDAProotDSE
> structuralObjectClass: OpenLDAProotDSE
> namingContexts: dc=my,dc=base
> supportedControl: 1.2.826.0.1.334810.2.3
> supportedControl: 1.3.6.1.4.1.4203.1.10.1
> supportedControl: 1.3.6.1.4.1.4203.1.10.2
> supportedControl: 2.16.840.1.113730.3.4.2
> supportedControl: 2.16.840.1.113730.3.4.18
> supportedExtension: 1.3.6.1.4.1.1466.20037
> supportedExtension: 1.3.6.1.4.1.4203.1.11.1
> supportedExtension: 1.3.6.1.4.1.4203.1.11.3
> supportedFeatures: 1.3.6.1.4.1.4203.1.5.1
> supportedFeatures: 1.3.6.1.4.1.4203.1.5.2
> supportedFeatures: 1.3.6.1.4.1.4203.1.5.3
> supportedFeatures: 1.3.6.1.4.1.4203.1.5.4
> supportedFeatures: 1.3.6.1.4.1.4203.1.5.5
> supportedLDAPVersion: 2
> supportedLDAPVersion: 3
>
> The only difference that I can think of is that the servers not showing
> the problem are built on solaris whereas the one that doesnt provide the
> attributes is built on linux. (I see the above was built without sasl -
> would that affect it?)
>

It should not do this (both of these are stock openldap compiles on
solaris 9)

$ ldapsearch -xLLLVs base -b ""
ldapsearch: @(#) $OpenLDAP: ldapsearch 2.1.22 (Jul 18 2003 18:01:06) $
        igor@io:/var/src/openldap-2.1.22/clients/tools
        (LDAP library: OpenLDAP 20122)
dn:
objectClass: top
objectClass: OpenLDAProotDSE


$ ldapsearch -xLLLVs base -b ""
ldapsearch: @(#) $OpenLDAP: ldapsearch 2.2.11 (Apr 26 2004 11:20:48) $
        igor@jupiter:/var/src/openldap-2.2.11/clients/tools
        (LDAP library: OpenLDAP 20211)
dn:
objectClass: top
objectClass: OpenLDAProotDSE

Read rfc3673 for more on operational attributes.

-- 
Igor