Re: Weird filter behaviour with ldapsearch

[Pierangelo Masarati <ando@sys-net.it>]

Jukka Hienola wrote:
> Hi!
>
> I just encountered that my master server behaves in strange way. In 
> requests to my slave servers, I get desired result:
>
>   ldapsearch -x -ZZ -h slave.server.net \
>     "(&(objectclass=posixgroup)(cn=groupname))" cn -LLL
>
>   dn: cn=groupname,ou=groups,dc=server,dc=net
>   cn: groupname
>
> when same request on master server doesn't return anything, UNLESS I 
> write e.g.
>
>   ldapsearch -x -ZZ -h master.server.net \
>     "(&(objectclass=posixgroup)(cn=g*e))" cn -LLL
>
> or
>
>   ldapsearch -x -ZZ -h master.server.net \
>     "(&(objectclass=posixgroup)(cn=g*))" cn -LLL
>
>   ldapsearch -x -ZZ -h master.server.net \
>     "(&(objectclass=posixgroup)(cn=*e))" cn -LLL
>
> but e.g.
>
>   ldapsearch -x -ZZ -h master.server.net \
>     "(&(objectclass=posixgroup)(cn=gr*))" cn -LLL
>
> or (cn=*me), (cn=gro*), (cn=*ame) etc. fails. Master and all slaves have 
> in slapd.conf
>
>   index cn eq,pres,sub
>
> I'm pretty sure that this has been working also on my master server. 
> Also my master and slae servers share same ACL definitions. Any ideas 
> what could cause this behaviour??
>
> Same problem exists when trying to read data from directory in PHP script.

Either you changed the "index" directive on the master without running 
slapindex, or you're using back-ldbm on the master, and your index files 
got corrupted.

p.



Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
------------------------------------------
Office:   +39.02.23998309
Mobile:   +39.333.4963172
Email:    pierangelo.masarati@sys-net.it
------------------------------------------