[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Bind failing with "critical extension is unavailable" error when used with pagedresultscontrol
> I have a program that works with Microsoft LDAP that I'm trying to get to
> work with openldap. The program is from a third-party and I have NO
> access to the code. I was able to duplicate the behavior with Perl code
> (testPaged.pl) later in this email.
>
> The bind is to a domain that uses the BDB backend. If my test code
> ignores the error from bind, it does the paged results just fine. The
> problem is the third-party program stops if it sees the error in bind.
> I've captured network traffic to the Microsoft LDAP server and see that it
> generates NO error.
>
> The version I'm running is: [root@radius1 openldap]# slapd -V
> @(#) $OpenLDAP: slapd 2.4.23 (Jul 31 2012 10:47:00) $
> mockbuild@x86-001.build.bos.redhat.com:/builddir/build/BUILD/openldap-2.4.23/openldap-2.4.23/build-servers/servers/slapd
>
> Is this a bug?
Yes, in the PERL code. Read RFC 2696:
2. The Control
This control is included in the searchRequest and searchResultDone
messages as part of the controls field of the LDAPMessage [...]
The PERL code is using paged results in the bind request, which is
nonsense, and it's making it critical, so the server can only reject the
request. Fix the client and the problem will go away.
p.
> I have the perl code, the debug run of the perl code, the
> slapd.d structure, dumps of the olcDatabase entries, and the results of
> "slapd -d -1" output.
>
>
>
> ##==============================================================testPaged.pl
> [mcannady@vmHTCradius1 ldap]$ cat testPaged.pl
> use Net::LDAP;
> use Net::LDAP::Control::Paged;
> use Net::LDAP::Constant qw( LDAP_CONTROL_PAGED );
> ##################################
> sub ProcessSearch {
> my ( $msg, $result ) = @_;
>
> ## Nothing to do
> return if ( ! defined($result) );
>
> if ( $result->isa("Net::LDAP::Reference") ) {
> ## a reference... just mention it.
> } else {
> $result->dump( );
> print "\n";
> }
> }
> #####################################
>
> $ldap = Net::LDAP->new( "radius1.pbx.htc.internal" );
>
> $page = Net::LDAP::Control::Paged->new( size => 10 , critical => true );
>
> $mesg = $ldap->bind( "uid=NuPoint,dc=htc,dc=com",
> password => "XXXXXXX[redacted]XXXXXXXXXXX" ,
> control => [ $page ]
> );
> if ( $mesg->code ) {
> ## print error
> print "error on bind: ", $mesg->error(), "\n";
> return;
> }
>
> @args = ( base => "cn=Users,dc=htc,dc=com",
> scope => "subtree",
> filter => "(objectClass=user)",
> callback => \&ProcessSearch, # Call this sub for each entry
> control => [ $page ],
> );
>
> my $cookie;
> while(1) {
> # Perform search
> my $mesg = $ldap->search( @args );
>
> # Only continue on LDAP_SUCCESS
> $mesg->code and last;
>
> # Get cookie from paged control
> my($resp) = $mesg->control( LDAP_CONTROL_PAGED ) or last;
> $cookie = $resp->cookie or last;
>
> # Set cookie in paged control
> $page->cookie($cookie);
> }
>
> if ($cookie) {
> # We had an abnormal exit, so let the server know we do not want any
> more
> $page->cookie($cookie);
> $page->size(0);
> $ldap->search( @args );
> }
> [mcannady@vmHTCradius1 ldap]$
> ##================================================================ perl
> debug-mode test
>
>
> [mcannady@vmHTCradius1 ldap]$ perl -d testPaged.pl
>
> Loading DB routines from perl5db.pl version 1.32
> Editor support available.
>
> Enter h or `h h' for help, or `man perldebug' for more help.
>
> main::(testPaged.pl:20): $ldap = Net::LDAP->new(
> "radius1.pbx.htc.internal" );
> DB<1> n
> main::(testPaged.pl:22): $page = Net::LDAP::Control::Paged->new(
> size => 10 , critical => true );
> DB<1> n
> main::(testPaged.pl:24): $mesg = $ldap->bind(
> "uid=NuPoint,dc=htc,dc=com",
> main::(testPaged.pl:25): password =>
> "XXXXXXXXX[redacted]XXXXXX" ,
> main::(testPaged.pl:26): control => [ $page ]
> main::(testPaged.pl:27): );
> DB<1> n
> main::(testPaged.pl:28): if ( $mesg->code ) {
> DB<1> n
> main::(testPaged.pl:30): print "error on bind: ",
> $mesg->error(), "\n";
> DB<1> n
> error on bind: critical extension is unavailable
> main::(testPaged.pl:31): return;
>
>
>
> ##======================================================================================
>
> [root@radius1 slapd.d]# find . -print
> .
> ./cn=config.ldif
> ./cn=config
> ./cn=config/cn=include{1}.ldif
> ./cn=config/cn=schema
> ./cn=config/cn=schema/cn={1}cosine.ldif
> ./cn=config/cn=schema/cn={4}ad.ldif
> ./cn=config/cn=schema/cn={2}inetorgperson.ldif
> ./cn=config/cn=schema/cn={3}nis.ldif
> ./cn=config/cn=schema/cn={0}core.ldif
> ./cn=config/cn=include{3}.ldif
> ./cn=config/olcDatabase={1}bdb.ldif
> ./cn=config/olcDatabase={2}bdb.ldif
> ./cn=config/olcDatabase={0}config.ldif
> ./cn=config/cn=schema.ldif
> ./cn=config/cn=include{2}.ldif
> ./cn=config/cn=include{0}.ldif
> ./cn=config/olcDatabase={3}monitor.ldif
> ./cn=config/olcDatabase={-1}frontend.ldif
>
> ##=======================================================================================
> ======================================================== cat
> olcDatabase={0}config.ldif
> dn: olcDatabase={0}config
> objectClass: olcDatabaseConfig
> olcDatabase: {0}config
> olcLastMod: TRUE
> olcMaxDerefDepth: 15
> olcReadOnly: FALSE
> olcRootDN: cn=admin,cn=config
> olcRootPW:: XXXredactedXXX
> structuralObjectClass: olcDatabaseConfig
> entryUUID: ac0d8a60-c861-1031-9bd4-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> entryCSN: 20121121195915Z#000000#00#000000
> modifiersName: cn=config
> modifyTimestamp: 20121121195915Z
> ======================================================== cat
> olcDatabase={1}bdb.ldif
> dn: olcDatabase={1}bdb
> objectClass: olcDatabaseConfig
> objectClass: olcBdbConfig
> olcDatabase: {1}bdb
> olcSuffix: dc=htc,dc=com
> olcAccess: {0}to * by
> dn.base="uid=push-master,cn=nupointproxy,dc=internal" w
> rite by * +0 break
> olcAccess: {1}to dn.base="" by * read
> olcAccess: {2}to dn.base="cn=subschema" by * read
> olcAccess: {3}to dn.subtree="cn=monitor" by users read by * none
> olcAccess: {4}to * by self write by * read
> olcLastMod: TRUE
> olcMaxDerefDepth: 15
> olcReadOnly: FALSE
> olcRootPW:: XXXXXXXXXXXXXXXXXXXXredactedXXXXXXXXXXXX
> olcDbDirectory: /var/lib/ldap/htc.com
> olcDbCacheSize: 150000
> olcDbCheckpoint: 102400 1
> olcDbConfig: {0}set_cachesize 0 268435465 1
> olcDbConfig: {1}set_lg_bsize 2097152
> olcDbConfig: {2}set_lg_regionmax 262144
> olcDbConfig: {3}set_flags DB_LOG_AUTOREMOVE
> olcDbNoSync: TRUE
> olcDbDirtyRead: FALSE
> olcDbIDLcacheSize: 150000
> olcDbIndex: objectClass pres,eq
> olcDbIndex: cn pres,eq,sub
> olcDbIndex: ou pres,eq,sub
> olcDbIndex: mail pres,eq,sub
> olcDbIndex: sn pres,eq,sub
> olcDbIndex: givenName pres,eq,sub
> olcDbLinearIndex: FALSE
> olcDbMode: 384
> olcDbSearchStack: 16
> olcDbShmKey: 12321
> olcDbCacheFree: 1
> structuralObjectClass: olcBdbConfig
> entryUUID: ac0da28e-c861-1031-9bd5-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> olcRootDN: uid=Manager,dc=htc,dc=com
> olcUpdateDN: uid=Push-Master,cn=NupointProxy,dc=internal
> entryCSN: 20121212180425.846656Z#000000#000#000000
> modifiersName: cn=admin,cn=config
> modifyTimestamp: 20121212180425Z
> ======================================================== cat
> olcDatabase={-1}frontend.ldif
> dn: olcDatabase={-1}frontend
> objectClass: olcDatabaseConfig
> objectClass: olcFrontendConfig
> olcDatabase: {-1}frontend
> olcLastMod: TRUE
> olcMaxDerefDepth: 0
> olcReadOnly: FALSE
> olcSchemaDN: cn=Subschema
> structuralObjectClass: olcDatabaseConfig
> entryUUID: ac0d771e-c861-1031-9bd3-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> olcTimeLimit: unlimited
> olcSizeLimit: unlimited
> entryCSN: 20121214201101.233668Z#000000#000#000000
> modifiersName: cn=admin,cn=config
> modifyTimestamp: 20121214201101Z
> ======================================================== cat
> olcDatabase={2}bdb.ldif
> dn: olcDatabase={2}bdb
> objectClass: olcDatabaseConfig
> objectClass: olcBdbConfig
> olcDatabase: {2}bdb
> olcSuffix: dc=internal
> olcAddContentAcl: FALSE
> olcLastMod: TRUE
> olcMaxDerefDepth: 15
> olcReadOnly: FALSE
> olcRootDN: cn=admin,cn=config
> olcSyncUseSubentry: FALSE
> olcMonitoring: TRUE
> olcDbDirectory: /var/lib/ldap/htc.internal
> olcDbCacheSize: 1000
> olcDbCheckpoint: 100 63
> olcDbNoSync: FALSE
> olcDbDirtyRead: FALSE
> olcDbIDLcacheSize: 0
> olcDbLinearIndex: FALSE
> olcDbMode: 0600
> olcDbSearchStack: 16
> olcDbShmKey: 0
> olcDbCacheFree: 1
> olcDbDNcacheSize: 0
> structuralObjectClass: olcBdbConfig
> entryUUID: 92ff370e-dcc9-1031-8a59-533cee5baf07
> creatorsName: cn=config
> createTimestamp: 20121217191324Z
> entryCSN: 20121217191324.652465Z#000000#000#000000
> modifiersName: cn=config
> modifyTimestamp: 20121217191324Z
> ======================================================== cat
> olcDatabase={3}monitor.ldif
> dn: olcDatabase={3}monitor
> objectClass: olcDatabaseConfig
> olcDatabase: {3}monitor
> olcAddContentAcl: FALSE
> olcLastMod: TRUE
> olcMaxDerefDepth: 15
> olcReadOnly: FALSE
> olcSyncUseSubentry: FALSE
> olcMonitoring: FALSE
> structuralObjectClass: olcDatabaseConfig
> entryUUID: 54da1e50-d8df-1031-85bf-235d062b63b6
> creatorsName: cn=config
> createTimestamp: 20121212193904Z
> entryCSN: 20121212193904.665758Z#000000#000#000000
> modifiersName: cn=config
> modifyTimestamp: 20121212193904Z
> ========================================================
>
>
> Script started on Tue 18 Dec 2012 01:56:28 PM EST
> [root@radius1 openldap]# slapd -u ldap -d -1
> @(#) $OpenLDAP: slapd 2.4.23 (Jul 31 2012 10:47:00) $
> mockbuild@x86-001.build.bos.redhat.com:/builddir/build/BUILD/openldap-2.4.23/openldap-2.4.23/build-servers/servers/slapd
> ldap_pvt_gethostbyname_a: host=radius1.pbx.htc.internal, r=0
> daemon_init: <null>
> daemon_init: listen on ldap:///
> daemon_init: 1 listeners to open...
> ldap_url_parse_ext(ldap:///)
> daemon: listener initialized ldap:///
> daemon_init: 2 listeners opened
> ldap_create
> slapd init: initiated server.
> slap_sasl_init: initialized!
> bdb_back_initialize: initialize BDB backend
> bdb_back_initialize: Berkeley DB 4.7.25: (March 5, 2012)
> hdb_back_initialize: initialize HDB backend
> hdb_back_initialize: Berkeley DB 4.7.25: (March 5, 2012)
> null_back_initialize: initialize null backend
> backend_startup_one: starting "cn=config"
> ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config.ldif"
> => str2entry: "dn: cn=config
> objectClass: olcGlobal
> cn: config
> olcConfigFile: /etc/openldap/slapd.conf
> olcConfigDir: /etc/openldap/slapd.d
> olcAllows: bind_v2
> olcArgsFile: /var/run/openldap/slapd.args
> olcAttributeOptions: lang-
> olcAuthzPolicy: none
> olcConcurrency: 0
> olcConnMaxPending: 100
> olcConnMaxPendingAuth: 1000
> olcGentleHUP: FALSE
> olcIdleTimeout: 0
> olcTLSCACertificateFile: /etc/pki/tls/certs/ca-bundle.crt
> olcTLSCertificateFile: /etc/pki/tls/certs/slapd.pem
> olcTLSCertificateKeyFile: /etc/pki/tls/certs/slapd.pem
> olcIndexSubstrIfMaxLen: 4
> olcIndexSubstrIfMinLen: 2
> olcIndexSubstrAnyLen: 4
> olcIndexSubstrAnyStep: 2
> olcLocalSSF: 71
> olcLogLevel: Stats
> olcPidFile: /var/run/openldap/slapd.pid
> olcReadOnly: FALSE
> olcReplicationInterval: 0
> olcReverseLookup: FALSE
> olcSaslHost: htcRadius1.htc.internal
> olcSaslSecProps: noplain,noanonymous
> olcSockbufMaxIncoming: 262143
> olcSockbufMaxIncomingAuth: 16777215
> olcThreads: 16
> olcTLSCRLCheck: none
> olcTLSVerifyClient: never
> olcToolThreads: 1
> structuralObjectClass: olcGlobal
> entryUUID: ac065c7c-c861-1031-9bc9-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> entryCSN: 20121121195915Z#000000#00#000000
> modifiersName: cn=config
> modifyTimestamp: 20121121195915Z
> "
>>>> dnPrettyNormal: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnPrettyNormal: <cn=config>, <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn=config) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn=config" "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> olcTLSCRLCheck: value #0: keyword <TLSCRLCheck> ignored
> olcTLSCRLCheck: value #0: keyword <TLSCRLCheck> ignored
> olcReplicationInterval: value #0: <olcReplicationInterval> keyword is
> obsolete (ignored)
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=include{0}.ldif"
> => str2entry: "dn: cn=include{0}
> objectClass: olcIncludeFile
> cn: include{0}
> olcInclude: /etc/openldap/schema/core.schema
> structuralObjectClass: olcIncludeFile
> entryUUID: ac0c28d2-c861-1031-9bca-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> entryCSN: 20121121195915Z#000000#00#000000
> modifiersName: cn=config
> modifyTimestamp: 20121121195915Z
> "
>>>> dnPrettyNormal: <cn=include{0}>
> => ldap_bv2dn(cn=include{0},0)
> <= ldap_bv2dn(cn=include{0})=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=include{0})=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=include{0})=0
> <<< dnPrettyNormal: <cn=include{0}>, <cn=include{0}>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn=include{0}) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn=include{0},cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=include{1}.ldif"
> => str2entry: "dn: cn=include{1}
> objectClass: olcIncludeFile
> cn: include{1}
> olcInclude: /etc/openldap/schema/cosine.schema
> structuralObjectClass: olcIncludeFile
> entryUUID: ac0c434e-c861-1031-9bcb-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> entryCSN: 20121121195915Z#000000#00#000000
> modifiersName: cn=config
> modifyTimestamp: 20121121195915Z
> "
>>>> dnPrettyNormal: <cn=include{1}>
> => ldap_bv2dn(cn=include{1},0)
> <= ldap_bv2dn(cn=include{1})=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=include{1})=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=include{1})=0
> <<< dnPrettyNormal: <cn=include{1}>, <cn=include{1}>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn=include{1}) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn=include{1},cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=include{2}.ldif"
> => str2entry: "dn: cn=include{2}
> objectClass: olcIncludeFile
> cn: include{2}
> olcInclude: /etc/openldap/schema/inetorgperson.schema
> structuralObjectClass: olcIncludeFile
> entryUUID: ac0c54f6-c861-1031-9bcc-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> entryCSN: 20121121195915Z#000000#00#000000
> modifiersName: cn=config
> modifyTimestamp: 20121121195915Z
> "
>>>> dnPrettyNormal: <cn=include{2}>
> => ldap_bv2dn(cn=include{2},0)
> <= ldap_bv2dn(cn=include{2})=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=include{2})=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=include{2})=0
> <<< dnPrettyNormal: <cn=include{2}>, <cn=include{2}>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn=include{2}) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn=include{2},cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=include{3}.ldif"
> => str2entry: "dn: cn=include{3}
> objectClass: olcIncludeFile
> cn: include{3}
> olcInclude: /etc/openldap/schema/nis.schema
> structuralObjectClass: olcIncludeFile
> entryUUID: ac0c6496-c861-1031-9bcd-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> entryCSN: 20121121195915Z#000000#00#000000
> modifiersName: cn=config
> modifyTimestamp: 20121121195915Z
> "
>>>> dnPrettyNormal: <cn=include{3}>
> => ldap_bv2dn(cn=include{3},0)
> <= ldap_bv2dn(cn=include{3})=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=include{3})=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=include{3})=0
> <<< dnPrettyNormal: <cn=include{3}>, <cn=include{3}>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn=include{3}) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn=include{3},cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=schema.ldif"
> => str2entry: "dn: cn=schema
> objectClass: olcSchemaConfig
> cn: schema
> olcObjectIdentifier: OLcfg 1.3.6.1.4.1.4203.666.11.1
> olcObjectIdentifier: OLcfgAt OLcfg:3
> olcObjectIdentifier: OLcfgGlAt OLcfgAt:0
> olcObjectIdentifier: OLcfgBkAt OLcfgAt:1
> olcObjectIdentifier: OLcfgDbAt OLcfgAt:2
> olcObjectIdentifier: OLcfgOvAt OLcfgAt:3
> olcObjectIdentifier: OLcfgOc OLcfg:4
> olcObjectIdentifier: OLcfgGlOc OLcfgOc:0
> olcObjectIdentifier: OLcfgBkOc OLcfgOc:1
> olcObjectIdentifier: OLcfgDbOc OLcfgOc:2
> olcObjectIdentifier: OLcfgOvOc OLcfgOc:3
> olcObjectIdentifier: OMsyn 1.3.6.1.4.1.1466.115.121.1
> olcObjectIdentifier: OMsInteger OMsyn:27
> olcObjectIdentifier: OMsBoolean OMsyn:7
> olcObjectIdentifier: OMsDN OMsyn:12
> olcObjectIdentifier: OMsDirectoryString OMsyn:15
> olcObjectIdentifier: OMsOctetString OMsyn:40
> olcAttributeTypes: ( 2.5.4.0 NAME 'objectClass' DESC 'RFC2256: object
> classes
> of the entity' EQUALITY objectIdentifierMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121
> .1.38 )
> olcAttributeTypes: ( 2.5.21.9 NAME 'structuralObjectClass' DESC
> 'X.500(93): st
> ructural object class of entry' EQUALITY objectIdentifierMatch SYNTAX
> 1.3.6.1
> .4.1.1466.115.121.1.38 SINGLE-VALUE NO-USER-MODIFICATION USAGE
> directoryOpera
> tion )
> olcAttributeTypes: ( 2.5.18.1 NAME 'createTimestamp' DESC 'RFC2252: time
> which
> object was created' EQUALITY generalizedTimeMatch ORDERING
> generalizedTimeOr
> deringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE
> NO-USER-MODIFIC
> ATION USAGE directoryOperation )
> olcAttributeTypes: ( 2.5.18.2 NAME 'modifyTimestamp' DESC 'RFC2252: time
> which
> object was last modified' EQUALITY generalizedTimeMatch ORDERING
> generalized
> TimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE
> NO-USER-M
> ODIFICATION USAGE directoryOperation )
> olcAttributeTypes: ( 2.5.18.3 NAME 'creatorsName' DESC 'RFC2252: name of
> creat
> or' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
> SING
> LE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )
> olcAttributeTypes: ( 2.5.18.4 NAME 'modifiersName' DESC 'RFC2252: name of
> last
> modifier' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> 12 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )
> olcAttributeTypes: ( 2.5.18.9 NAME 'hasSubordinates' DESC 'X.501: entry
> has ch
> ildren' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
> SINGLE-VALU
> E NO-USER-MODIFICATION USAGE directoryOperation )
> olcAttributeTypes: ( 2.5.18.10 NAME 'subschemaSubentry' DESC 'RFC2252:
> name of
> controlling subschema entry' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.
> 4.1.1466.115.121.1.12 SINGLE-VALUE NO-USER-MODIFICATION USAGE
> directoryOperat
> ion )
> olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.33 NAME 'entryDN' DESC 'DN of
> the
> entry' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.12 S
> INGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )
> olcAttributeTypes: ( 1.3.6.1.1.16.4 NAME 'entryUUID' DESC 'UUID of the
> entry'
> EQUALITY UUIDMatch ORDERING UUIDOrderingMatch SYNTAX 1.3.6.1.1.16.1
> SINGLE-VA
> LUE NO-USER-MODIFICATION USAGE directoryOperation )
> olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.7 NAME 'entryCSN' DESC 'change
> seq
> uence number of the entry content' EQUALITY CSNMatch ORDERING
> CSNOrderingMatc
> h SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE
> NO-USER-MODIFICATION US
> AGE directoryOperation )
> olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.13 NAME 'namingCSN' DESC
> 'change s
> equence number of the entry naming (RDN)' EQUALITY CSNMatch ORDERING
> CSNOrder
> ingMatch SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE
> NO-USER-MODIFICA
> TION USAGE directoryOperation )
> olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.23 NAME 'syncreplCookie' DESC
> 'syn
> crepl Cookie for shadow copy' EQUALITY octetStringMatch ORDERING
> octetStringO
> rderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE
> NO-USER-MODIFI
> CATION USAGE dSAOperation )
> olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.25 NAME 'contextCSN' DESC 'the
> lar
> gest committed CSN of a context' EQUALITY CSNMatch ORDERING
> CSNOrderingMatch
> SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE NO-USER-MODIFI>>>
> dnPrettyNormal: <cn=schema>
> => ldap_bv2dn(cn=schema,0)
> <= ldap_bv2dn(cn=schema)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=schema)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=schema)=0
> <<< dnPrettyNormal: <cn=schema>, <cn=schema>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn=schema) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn=schema,cn=config" "objectClass"
> requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=schema/cn={0}core.ldif"
> => str2entry: "dn: cn={0}core
> objectClass: olcSchemaConfig
> cn: {0}core
> olcAttributeTypes: {0}( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256:
> kno
> wledge information' EQUALITY caseIgnoreMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.
> 1.15{32768} )
> olcAttributeTypes: {1}( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256:
> last (f
> amily) name(s) for which the entity is known by' SUP name )
> olcAttributeTypes: {2}( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial
> numb
> er of the entity' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMatch S
> YNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} )
> olcAttributeTypes: {3}( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC2256:
> ISO-
> 3166 country 2-letter code' SUP name SINGLE-VALUE )
> olcAttributeTypes: {4}( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256:
> loc
> ality which this object resides in' SUP name )
> olcAttributeTypes: {5}( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC
> 'RFC2
> 256: state or province which this object resides in' SUP name )
> olcAttributeTypes: {6}( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC
> 'RFC225
> 6: street address of this object' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreS
> ubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
> olcAttributeTypes: {7}( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC
> 'RFC2256
> : organization this object belongs to' SUP name )
> olcAttributeTypes: {8}( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' )
> DESC '
> RFC2256: organizational unit this object belongs to' SUP name )
> olcAttributeTypes: {9}( 2.5.4.12 NAME 'title' DESC 'RFC2256: title
> associated
> with the entity' SUP name )
> olcAttributeTypes: {10}( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search
> gui
> de, deprecated by enhancedSearchGuide' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.25 )
> olcAttributeTypes: {11}( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256:
> busin
> ess category' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
> SYNTA
> X 1.3.6.1.4.1.1466.115.121.1.15{128} )
> olcAttributeTypes: {12}( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256:
> postal a
> ddress' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch
> SYN
> TAX 1.3.6.1.4.1.1466.115.121.1.41 )
> olcAttributeTypes: {13}( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal
> code
> ' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.
> 1.1466.115.121.1.15{40} )
> olcAttributeTypes: {14}( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post
> Off
> ice Box' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3
> .6.1.4.1.1466.115.121.1.15{40} )
> olcAttributeTypes: {15}( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC
> 'RFC2
> 256: Physical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnor
> eSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
> olcAttributeTypes: {16}( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256:
> Teleph
> one Number' EQUALITY telephoneNumberMatch SUBSTR
> telephoneNumberSubstringsMat
> ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} )
> olcAttributeTypes: {17}( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex
> Numb
> er' SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 )
> olcAttributeTypes: {18}( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC
> 'RFC22
> 56: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 )
> olcAttributeTypes: {19}( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax'
> ) DE
> SC 'RFC2256: Facsimile (Fax) Telephone Number' SYNTAX
> 1.3.6.1.4.1.1466.115.12
> 1.1.22 )
> olcAttributeTypes: {20}( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121
> Addr
> ess' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch
> SYNTAX 1
> .3.6.1.4.1.1466.115.121.1.36{15} )
> olcAttributeTypes: {21}( 2.5.4.25 NAME 'internationaliSDNNumber' DESC
> 'RFC2256
> : international ISDN number' EQUALITY numericStringMatch SUBSTR
> numericString
> SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} )
> olcAttributeTypes: {22}( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256:
> regi
> stered postal address' SUP postalAddress SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.41
> )
> olcAttributeTypes: {23}( 2.5.4.27 NAME 'destinationIndicator' DESC
> 'RFC2256: d
> estination indicator' EQUALITY caseIgnoreMatch SUBSTR cas>>>
> dnPrettyNormal: <cn={0}core>
> => ldap_bv2dn(cn={0}core,0)
> <= ldap_bv2dn(cn={0}core)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={0}core)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={0}core)=0
> <<< dnPrettyNormal: <cn={0}core>, <cn={0}core>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn={0}core) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn={0}core,cn=schema,cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=schema/cn={1}cosine.ldif"
> => str2entry: "dn: cn={1}cosine
> objectClass: olcSchemaConfig
> cn: {1}cosine
> olcAttributeTypes: {0}( 0.9.2342.19200300.100.1.2 NAME
> 'textEncodedORAddress'
> EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.
> 1466.115.121.1.15{256} )
> olcAttributeTypes: {1}( 0.9.2342.19200300.100.1.4 NAME 'info' DESC
> 'RFC1274: g
> eneral information' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMatch
> SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} )
> olcAttributeTypes: {2}( 0.9.2342.19200300.100.1.5 NAME ( 'drink'
> 'favouriteDri
> nk' ) DESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR
> caseIgno
> reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> olcAttributeTypes: {3}( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC
> 'RFC1
> 274: room number' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMatch S
> YNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> olcAttributeTypes: {4}( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC
> 'RFC1274:
> photo (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} )
> olcAttributeTypes: {5}( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC
> 'RFC12
> 74: category of user' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMat
> ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> olcAttributeTypes: {6}( 0.9.2342.19200300.100.1.9 NAME 'host' DESC
> 'RFC1274: h
> ost computer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
> SYNTA
> X 1.3.6.1.4.1.1466.115.121.1.15{256} )
> olcAttributeTypes: {7}( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC
> 'RFC127
> 4: DN of manager' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.1466.115
> .121.1.12 )
> olcAttributeTypes: {8}( 0.9.2342.19200300.100.1.11 NAME
> 'documentIdentifier' D
> ESC 'RFC1274: unique identifier of document' EQUALITY caseIgnoreMatch
> SUBSTR
> caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> olcAttributeTypes: {9}( 0.9.2342.19200300.100.1.12 NAME 'documentTitle'
> DESC '
> RFC1274: title of document' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstri
> ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> olcAttributeTypes: {10}( 0.9.2342.19200300.100.1.13 NAME 'documentVersion'
> DES
> C 'RFC1274: version of document' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSu
> bstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> olcAttributeTypes: {11}( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor'
> DESC
> 'RFC1274: DN of author of document' EQUALITY distinguishedNameMatch
> SYNTAX 1
> .3.6.1.4.1.1466.115.121.1.12 )
> olcAttributeTypes: {12}( 0.9.2342.19200300.100.1.15 NAME
> 'documentLocation' DE
> SC 'RFC1274: location of document original' EQUALITY caseIgnoreMatch
> SUBSTR c
> aseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> olcAttributeTypes: {13}( 0.9.2342.19200300.100.1.20 NAME ( 'homePhone'
> 'homeTe
> lephoneNumber' ) DESC 'RFC1274: home telephone number' EQUALITY
> telephoneNumb
> erMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121
> .1.50 )
> olcAttributeTypes: {14}( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC
> 'RFC
> 1274: DN of secretary' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.146
> 6.115.121.1.12 )
> olcAttributeTypes: {15}( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox'
> SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.39 )
> olcAttributeTypes: {16}( 0.9.2342.19200300.100.1.26 NAME 'aRecord'
> EQUALITY ca
> seIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> olcAttributeTypes: {17}( 0.9.2342.19200300.100.1.27 NAME 'mDRecord'
> EQUALITY c
> aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> olcAttributeTypes: {18}( 0.9.2342.19200300.100.1.28 NAME 'mXRecord'
> EQUALITY c
> aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> olcAttributeTypes: {19}( 0.9.2342.19200300.100.1.29 NAME 'nSRecord'
> EQUALITY c
> aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> olcAttributeTypes: {20}( 0.9.2342.19200300.100.1.30 NAME 'sOARecord'
> EQUALITY
> caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> olcAttributeTypes: {21}( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord'
> EQUALIT
> Y caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> olcAttributeTypes: {22}( 0.9.2342.19200300.100.1.38 NAM>>> dnPrettyNormal:
> <cn={1}cosine>
> => ldap_bv2dn(cn={1}cosine,0)
> <= ldap_bv2dn(cn={1}cosine)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={1}cosine)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={1}cosine)=0
> <<< dnPrettyNormal: <cn={1}cosine>, <cn={1}cosine>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn={1}cosine) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn={1}cosine,cn=schema,cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=schema/cn={2}inetorgperson.ldif"
> => str2entry: "dn: cn={2}inetorgperson
> objectClass: olcSchemaConfig
> cn: {2}inetorgperson
> olcAttributeTypes: {0}( 2.16.840.1.113730.3.1.1 NAME 'carLicense' DESC
> 'RFC279
> 8: vehicle license or registration plate' EQUALITY caseIgnoreMatch SUBSTR
> cas
> eIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
> olcAttributeTypes: {1}( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber'
> DESC '
> RFC2798: identifies a department within an organization' EQUALITY
> caseIgnoreM
> atch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.15 )
> olcAttributeTypes: {2}( 2.16.840.1.113730.3.1.241 NAME 'displayName' DESC
> 'RFC
> 2798: preferred name to be used when displaying entries' EQUALITY
> caseIgnoreM
> atch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.15 SI
> NGLE-VALUE )
> olcAttributeTypes: {3}( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber' DESC
> 'RF
> C2798: numerically identifies an employee within an organization'
> EQUALITY ca
> seIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.12
> 1.1.15 SINGLE-VALUE )
> olcAttributeTypes: {4}( 2.16.840.1.113730.3.1.4 NAME 'employeeType' DESC
> 'RFC2
> 798: type of employment for a person' EQUALITY caseIgnoreMatch SUBSTR
> caseIgn
> oreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
> olcAttributeTypes: {5}( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto' DESC
> 'RFC2
> 798: a JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 )
> olcAttributeTypes: {6}( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage'
> DESC
> 'RFC2798: preferred written or spoken language for a person' EQUALITY
> caseIg
> noreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> 15 SINGLE-VALUE )
> olcAttributeTypes: {7}( 2.16.840.1.113730.3.1.40 NAME
> 'userSMIMECertificate' D
> ESC 'RFC2798: PKCS#7 SignedData used to support S/MIME' SYNTAX
> 1.3.6.1.4.1.14
> 66.115.121.1.5 )
> olcAttributeTypes: {8}( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12' DESC
> 'RFC2
> 798: personal identity information, a PKCS #12 PFX' SYNTAX
> 1.3.6.1.4.1.1466.1
> 15.121.1.5 )
> olcObjectClasses: {0}( 2.16.840.1.113730.3.2.2 NAME 'inetOrgPerson' DESC
> 'RFC2
> 798: Internet Organizational Person' SUP organizationalPerson STRUCTURAL
> MAY
> ( audio $ businessCategory $ carLicense $ departmentNumber $ displayName
> $ em
> ployeeNumber $ employeeType $ givenName $ homePhone $ homePostalAddress $
> ini
> tials $ jpegPhoto $ labeledURI $ mail $ manager $ mobile $ o $ pager $
> photo
> $ roomNumber $ secretary $ uid $ userCertificate $ x500uniqueIdentifier $
> pre
> ferredLanguage $ userSMIMECertificate $ userPKCS12 ) )
> structuralObjectClass: olcSchemaConfig
> entryUUID: ac0d4294-c861-1031-9bd1-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> entryCSN: 20121121195915Z#000000#00#000000
> modifiersName: cn=config
> modifyTimestamp: 20121121195915Z
> "
>>>> dnPrettyNormal: <cn={2}inetorgperson>
> => ldap_bv2dn(cn={2}inetorgperson,0)
> <= ldap_bv2dn(cn={2}inetorgperson)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={2}inetorgperson)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={2}inetorgperson)=0
> <<< dnPrettyNormal: <cn={2}inetorgperson>, <cn={2}inetorgperson>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn={2}inetorgperson) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to
> "cn={2}inetorgperson,cn=schema,cn=config" "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=schema/cn={3}nis.ldif"
> => str2entry: "dn: cn={3}nis
> objectClass: olcSchemaConfig
> cn: {3}nis
> olcAttributeTypes: {0}( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS
> field; th
> e common name' EQUALITY caseIgnoreIA5Match SUBSTR
> caseIgnoreIA5SubstringsMatc
> h SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
> olcAttributeTypes: {1}( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The
> absolut
> e path to the home directory' EQUALITY caseExactIA5Match SYNTAX
> 1.3.6.1.4.1.1
> 466.115.121.1.26 SINGLE-VALUE )
> olcAttributeTypes: {2}( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path
> to th
> e login shell' EQUALITY caseExactIA5Match SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.2
> 6 SINGLE-VALUE )
> olcAttributeTypes: {3}( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY
> integ
> erMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {4}( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY
> integerMatch
> SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {5}( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY
> integerMatch
> SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {6}( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY
> integerM
> atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {7}( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY
> integer
> Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {8}( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY
> integerM
> atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {9}( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY
> integerMat
> ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {10}( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY
> caseExactI
> A5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> 26 )
> olcAttributeTypes: {11}( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup'
> EQUALITY ca
> seExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.11
> 5.121.1.26 )
> olcAttributeTypes: {12}( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC
> 'Netgr
> oup triple' SYNTAX 1.3.6.1.1.1.0.0 )
> olcAttributeTypes: {13}( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' EQUALITY
> intege
> rMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {14}( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' SUP
> name )
> olcAttributeTypes: {15}( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' EQUALITY
> int
> egerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {16}( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' EQUALITY
> integer
> Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> olcAttributeTypes: {17}( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IP
> address
> ' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
> olcAttributeTypes: {18}( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP
> netw
> ork' EQUALITY caseIgnoreIA5Match SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.26{128} SI
> NGLE-VALUE )
> olcAttributeTypes: {19}( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP
> netm
> ask' EQUALITY caseIgnoreIA5Match SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.26{128} SI
> NGLE-VALUE )
> olcAttributeTypes: {20}( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC
> address'
> EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
> olcAttributeTypes: {21}( 1.3.6.1.1.1.1.23 NAME 'bootParameter' DESC
> 'rpc.bootp
> aramd parameter' SYNTAX 1.3.6.1.1.1.0.1 )
> olcAttributeTypes: {22}( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image
> nam
> e' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> olcAttributeTypes: {23}( 1.3.6.1.1.1.1.26 NAME 'nisMapName' SUP name )
> olcAttributeTypes: {24}( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' EQUALITY
> caseExac
> tIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.
> 1.26{1024} SINGLE-VALUE )
> olcObjectClasses: {0}( 1.3.6.1.1.1.2.0 NAME 'posixAccount' DESC
> 'Abstraction o
> f an account with POSIX attributes' SUP top AUXILIARY MUST ( cn $ uid $
> uidNu
> mber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $
> gecos $
> description ) )
> olcObjectClasses: {1}( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' DESC
> 'Additional a
> ttributes for shadow passwords'>>> dnPrettyNormal: <cn={3}nis>
> => ldap_bv2dn(cn={3}nis,0)
> <= ldap_bv2dn(cn={3}nis)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={3}nis)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={3}nis)=0
> <<< dnPrettyNormal: <cn={3}nis>, <cn={3}nis>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn={3}nis) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn={3}nis,cn=schema,cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/cn=schema/cn={4}ad.ldif"
> => str2entry: "dn: cn={4}AD
> objectClass: olcSchemaConfig
> cn: {4}AD
> olcAttributeTypes: {0}( 1.2.840.113556.1.2.447 NAME 'mailNickname'
> SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
> olcAttributeTypes: {1}( 1.2.840.113556.1.4.782 NAME 'objectCategory'
> SYNTA
> X 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
> olcAttributeTypes: {2}( 1.2.840.113556.1.4.221 NAME 'sAMAccountName'
> SYNTA
> X 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
> olcObjectClasses: {0}( 1.2.840.113556.1.5.9 NAME 'user' SUP
> organizational
> Person STRUCTURAL MAY ( objectCategory $ mailNickname $ sAMAccountName
> $ di
> splayName $ mail ) )
> olcObjectClasses: {1}( 1.2.840.113556.1.3.23 NAME 'container' SUP top
> STRU
> CTURAL MUST cn )
> structuralObjectClass: olcSchemaConfig
> entryUUID: 6feaa26c-cf6d-1031-986d-79eaa697be5e
> creatorsName: cn=config
> createTimestamp: 20121130191106Z
> entryCSN: 20121130191106Z#000000#00#000000
> modifiersName: cn=config
> modifyTimestamp: 20121130191106Z
> "
>>>> dnPrettyNormal: <cn={4}AD>
> => ldap_bv2dn(cn={4}AD,0)
> <= ldap_bv2dn(cn={4}AD)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={4}AD)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn={4}ad)=0
> <<< dnPrettyNormal: <cn={4}AD>, <cn={4}ad>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(cn={4}AD) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "cn={4}AD,cn=schema,cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/olcDatabase={-1}frontend.ldif"
> => str2entry: "dn: olcDatabase={-1}frontend
> objectClass: olcDatabaseConfig
> objectClass: olcFrontendConfig
> olcDatabase: {-1}frontend
> olcLastMod: TRUE
> olcMaxDerefDepth: 0
> olcReadOnly: FALSE
> olcSchemaDN: cn=Subschema
> structuralObjectClass: olcDatabaseConfig
> entryUUID: ac0d771e-c861-1031-9bd3-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> olcTimeLimit: unlimited
> olcSizeLimit: unlimited
> entryCSN: 20121214201101.233668Z#000000#000#000000
> modifiersName: cn=admin,cn=config
> modifyTimestamp: 20121214201101Z
> "
>>>> dnPrettyNormal: <olcDatabase={-1}frontend>
> => ldap_bv2dn(olcDatabase={-1}frontend,0)
> <= ldap_bv2dn(olcDatabase={-1}frontend)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={-1}frontend)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={-1}frontend)=0
> <<< dnPrettyNormal: <olcDatabase={-1}frontend>, <olcDatabase={-1}frontend>
>>>> dnNormalize: <cn=Subschema>
> => ldap_bv2dn(cn=Subschema,0)
> <= ldap_bv2dn(cn=Subschema)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=subschema)=0
> <<< dnNormalize: <cn=subschema>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=admin,cn=config>
> => ldap_bv2dn(cn=admin,cn=config,0)
> <= ldap_bv2dn(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> <<< dnNormalize: <cn=admin,cn=config>
> <= str2entry(olcDatabase={-1}frontend) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "olcDatabase={-1}frontend,cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
>>>> dnPrettyNormal: <cn=Subschema>
> => ldap_bv2dn(cn=Subschema,0)
> <= ldap_bv2dn(cn=Subschema)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Subschema)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=subschema)=0
> <<< dnPrettyNormal: <cn=Subschema>, <cn=subschema>
>>>> dnPrettyNormal: <cn=Subschema>
> => ldap_bv2dn(cn=Subschema,0)
> <= ldap_bv2dn(cn=Subschema)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Subschema)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=subschema)=0
> <<< dnPrettyNormal: <cn=Subschema>, <cn=subschema>
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/olcDatabase={0}config.ldif"
> => str2entry: "dn: olcDatabase={0}config
> objectClass: olcDatabaseConfig
> olcDatabase: {0}config
> olcLastMod: TRUE
> olcMaxDerefDepth: 15
> olcReadOnly: FALSE
> olcRootDN: cn=admin,cn=config
> olcRootPW:: Y29uZmln
> structuralObjectClass: olcDatabaseConfig
> entryUUID: ac0d8a60-c861-1031-9bd4-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> entryCSN: 20121121195915Z#000000#00#000000
> modifiersName: cn=config
> modifyTimestamp: 20121121195915Z
> "
>>>> dnPrettyNormal: <olcDatabase={0}config>
> => ldap_bv2dn(olcDatabase={0}config,0)
> <= ldap_bv2dn(olcDatabase={0}config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={0}config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={0}config)=0
> <<< dnPrettyNormal: <olcDatabase={0}config>, <olcDatabase={0}config>
>>>> dnNormalize: <cn=admin,cn=config>
> => ldap_bv2dn(cn=admin,cn=config,0)
> <= ldap_bv2dn(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> <<< dnNormalize: <cn=admin,cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(olcDatabase={0}config) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "olcDatabase={0}config,cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
>>>> dnPrettyNormal: <cn=admin,cn=config>
> => ldap_bv2dn(cn=admin,cn=config,0)
> <= ldap_bv2dn(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> <<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config>
>>>> dnPrettyNormal: <cn=admin,cn=config>
> => ldap_bv2dn(cn=admin,cn=config,0)
> <= ldap_bv2dn(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> <<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config>
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/olcDatabase={1}bdb.ldif"
> => str2entry: "dn: olcDatabase={1}bdb
> objectClass: olcDatabaseConfig
> objectClass: olcBdbConfig
> olcDatabase: {1}bdb
> olcSuffix: dc=htc,dc=com
> olcAccess: {0}to * by
> dn.base="uid=push-master,cn=nupointproxy,dc=internal" w
> rite by * +0 break
> olcAccess: {1}to dn.base="" by * read
> olcAccess: {2}to dn.base="cn=subschema" by * read
> olcAccess: {3}to dn.subtree="cn=monitor" by users read by * none
> olcAccess: {4}to * by self write by * read
> olcLastMod: TRUE
> olcMaxDerefDepth: 15
> olcReadOnly: FALSE
> olcRootPW:: e1NIQX01ZW42RzZNZXpScm9UM1hLcWtkUE9tWS9CZlE9
> olcDbDirectory: /var/lib/ldap/htc.com
> olcDbCacheSize: 150000
> olcDbCheckpoint: 102400 1
> olcDbConfig: {0}set_cachesize 0 268435465 1
> olcDbConfig: {1}set_lg_bsize 2097152
> olcDbConfig: {2}set_lg_regionmax 262144
> olcDbConfig: {3}set_flags DB_LOG_AUTOREMOVE
> olcDbNoSync: TRUE
> olcDbDirtyRead: FALSE
> olcDbIDLcacheSize: 150000
> olcDbIndex: objectClass pres,eq
> olcDbIndex: cn pres,eq,sub
> olcDbIndex: ou pres,eq,sub
> olcDbIndex: mail pres,eq,sub
> olcDbIndex: sn pres,eq,sub
> olcDbIndex: givenName pres,eq,sub
> olcDbLinearIndex: FALSE
> olcDbMode: 384
> olcDbSearchStack: 16
> olcDbShmKey: 12321
> olcDbCacheFree: 1
> structuralObjectClass: olcBdbConfig
> entryUUID: ac0da28e-c861-1031-9bd5-5591ba7dfe32
> creatorsName: cn=config
> createTimestamp: 20121121195915Z
> olcRootDN: uid=Manager,dc=htc,dc=com
> olcUpdateDN: uid=Push-Master,cn=NupointProxy,dc=internal
> entryCSN: 20121212180425.846656Z#000000#000#000000
> modifiersName: cn=admin,cn=config
> modifyTimestamp: 20121212180425Z
> "
>>>> dnPrettyNormal: <olcDatabase={1}bdb>
> => ldap_bv2dn(olcDatabase={1}bdb,0)
> <= ldap_bv2dn(olcDatabase={1}bdb)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={1}bdb)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={1}bdb)=0
> <<< dnPrettyNormal: <olcDatabase={1}bdb>, <olcDatabase={1}bdb>
>>>> dnNormalize: <dc=htc,dc=com>
> => ldap_bv2dn(dc=htc,dc=com,0)
> <= ldap_bv2dn(dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=htc,dc=com)=0
> <<< dnNormalize: <dc=htc,dc=com>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <uid=Manager,dc=htc,dc=com>
> => ldap_bv2dn(uid=Manager,dc=htc,dc=com,0)
> <= ldap_bv2dn(uid=Manager,dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=manager,dc=htc,dc=com)=0
> <<< dnNormalize: <uid=manager,dc=htc,dc=com>
>>>> dnNormalize: <cn=admin,cn=config>
> => ldap_bv2dn(cn=admin,cn=config,0)
> <= ldap_bv2dn(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> <<< dnNormalize: <cn=admin,cn=config>
> <= str2entry(olcDatabase={1}bdb) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "olcDatabase={1}bdb,cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
>>>> dnPrettyNormal: <dc=htc,dc=com>
> => ldap_bv2dn(dc=htc,dc=com,0)
> <= ldap_bv2dn(dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=htc,dc=com)=0
> <<< dnPrettyNormal: <dc=htc,dc=com>, <dc=htc,dc=com>
>>>> dnPrettyNormal: <uid=Manager,dc=htc,dc=com>
> => ldap_bv2dn(uid=Manager,dc=htc,dc=com,0)
> <= ldap_bv2dn(uid=Manager,dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=Manager,dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=manager,dc=htc,dc=com)=0
> <<< dnPrettyNormal: <uid=Manager,dc=htc,dc=com>,
> <uid=manager,dc=htc,dc=com>
>>>> dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>
> => ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal,0)
> <= ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=Push-Master,cn=NupointProxy,dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=push-master,cn=nupointproxy,dc=internal)=0
> <<< dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>,
> <uid=push-master,cn=nupointproxy,dc=internal>
> bdb_db_init: Initializing BDB database
>>>> dnPrettyNormal: <dc=htc,dc=com>
> => ldap_bv2dn(dc=htc,dc=com,0)
> <= ldap_bv2dn(dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=htc,dc=com)=0
> <<< dnPrettyNormal: <dc=htc,dc=com>, <dc=htc,dc=com>
>>>> dnNormalize: <uid=push-master,cn=nupointproxy,dc=internal>
> => ldap_bv2dn(uid=push-master,cn=nupointproxy,dc=internal,0)
> <= ldap_bv2dn(uid=push-master,cn=nupointproxy,dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=push-master,cn=nupointproxy,dc=internal)=0
> <<< dnNormalize: <uid=push-master,cn=nupointproxy,dc=internal>
> Backend ACL: access to *
> by dn.base="uid=push-master,cn=nupointproxy,dc=internal" write
> by * +0 break
>
> /etc/openldap/slapd.d: line 1: warning: cannot assess the validity of the
> ACL scope within backend naming context
>>>> dnNormalize: <>
> <<< dnNormalize: <>
> Backend ACL: access to dn.base=""
> by * read
>
> /etc/openldap/slapd.d: line 1: warning: ACL appears to be out of scope
> within backend naming context
>>>> dnNormalize: <cn=subschema>
> => ldap_bv2dn(cn=subschema,0)
> <= ldap_bv2dn(cn=subschema)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=subschema)=0
> <<< dnNormalize: <cn=subschema>
> Backend ACL: access to dn.base="cn=subschema"
> by * read
>
> /etc/openldap/slapd.d: line 1: warning: ACL appears to be out of scope
> within backend naming context
>>>> dnNormalize: <cn=monitor>
> => ldap_bv2dn(cn=monitor,0)
> <= ldap_bv2dn(cn=monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=monitor)=0
> <<< dnNormalize: <cn=monitor>
> Backend ACL: access to dn.subtree="cn=monitor"
> by users read
> by * none
>
> /etc/openldap/slapd.d: line 1: warning: ACL appears to be out of scope
> within backend naming context
> Backend ACL: access to *
> by self write
> by * read
>
> /etc/openldap/slapd.d: line 1: warning: cannot assess the validity of the
> ACL scope within backend naming context
>>>> dnPrettyNormal: <uid=Manager,dc=htc,dc=com>
> => ldap_bv2dn(uid=Manager,dc=htc,dc=com,0)
> <= ldap_bv2dn(uid=Manager,dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=Manager,dc=htc,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=manager,dc=htc,dc=com)=0
> <<< dnPrettyNormal: <uid=Manager,dc=htc,dc=com>,
> <uid=manager,dc=htc,dc=com>
>>>> dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>
> => ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal,0)
> <= ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=Push-Master,cn=NupointProxy,dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=push-master,cn=nupointproxy,dc=internal)=0
> <<< dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>,
> <uid=push-master,cn=nupointproxy,dc=internal>
> index objectClass 0x0006
> index cn 0x0716
> index ou 0x0716
> index mail 0x0716
> index sn 0x0716
> index givenName 0x0716
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/olcDatabase={2}bdb.ldif"
> => str2entry: "dn: olcDatabase={2}bdb
> objectClass: olcDatabaseConfig
> objectClass: olcBdbConfig
> olcDatabase: {2}bdb
> olcSuffix: dc=internal
> olcAddContentAcl: FALSE
> olcLastMod: TRUE
> olcMaxDerefDepth: 15
> olcReadOnly: FALSE
> olcRootDN: cn=admin,cn=config
> olcSyncUseSubentry: FALSE
> olcMonitoring: TRUE
> olcDbDirectory: /var/lib/ldap/htc.internal
> olcDbCacheSize: 1000
> olcDbCheckpoint: 100 63
> olcDbNoSync: FALSE
> olcDbDirtyRead: FALSE
> olcDbIDLcacheSize: 0
> olcDbLinearIndex: FALSE
> olcDbMode: 0600
> olcDbSearchStack: 16
> olcDbShmKey: 0
> olcDbCacheFree: 1
> olcDbDNcacheSize: 0
> structuralObjectClass: olcBdbConfig
> entryUUID: 92ff370e-dcc9-1031-8a59-533cee5baf07
> creatorsName: cn=config
> createTimestamp: 20121217191324Z
> entryCSN: 20121217191324.652465Z#000000#000#000000
> modifiersName: cn=config
> modifyTimestamp: 20121217191324Z
> "
>>>> dnPrettyNormal: <olcDatabase={2}bdb>
> => ldap_bv2dn(olcDatabase={2}bdb,0)
> <= ldap_bv2dn(olcDatabase={2}bdb)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={2}bdb)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={2}bdb)=0
> <<< dnPrettyNormal: <olcDatabase={2}bdb>, <olcDatabase={2}bdb>
>>>> dnNormalize: <dc=internal>
> => ldap_bv2dn(dc=internal,0)
> <= ldap_bv2dn(dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=internal)=0
> <<< dnNormalize: <dc=internal>
>>>> dnNormalize: <cn=admin,cn=config>
> => ldap_bv2dn(cn=admin,cn=config,0)
> <= ldap_bv2dn(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> <<< dnNormalize: <cn=admin,cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(olcDatabase={2}bdb) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "olcDatabase={2}bdb,cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
>>>> dnPrettyNormal: <dc=internal>
> => ldap_bv2dn(dc=internal,0)
> <= ldap_bv2dn(dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=internal)=0
> <<< dnPrettyNormal: <dc=internal>, <dc=internal>
>>>> dnPrettyNormal: <cn=admin,cn=config>
> => ldap_bv2dn(cn=admin,cn=config,0)
> <= ldap_bv2dn(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> <<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config>
> bdb_db_init: Initializing BDB database
>>>> dnPrettyNormal: <dc=internal>
> => ldap_bv2dn(dc=internal,0)
> <= ldap_bv2dn(dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=internal)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(dc=internal)=0
> <<< dnPrettyNormal: <dc=internal>, <dc=internal>
>>>> dnPrettyNormal: <cn=admin,cn=config>
> => ldap_bv2dn(cn=admin,cn=config,0)
> <= ldap_bv2dn(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=admin,cn=config)=0
> <<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config>
> ldif_read_file: read entry file:
> "/etc/openldap/slapd.d/cn=config/olcDatabase={3}monitor.ldif"
> => str2entry: "dn: olcDatabase={3}monitor
> objectClass: olcDatabaseConfig
> olcDatabase: {3}monitor
> olcAddContentAcl: FALSE
> olcLastMod: TRUE
> olcMaxDerefDepth: 15
> olcReadOnly: FALSE
> olcSyncUseSubentry: FALSE
> olcMonitoring: FALSE
> structuralObjectClass: olcDatabaseConfig
> entryUUID: 54da1e50-d8df-1031-85bf-235d062b63b6
> creatorsName: cn=config
> createTimestamp: 20121212193904Z
> entryCSN: 20121212193904.665758Z#000000#000#000000
> modifiersName: cn=config
> modifyTimestamp: 20121212193904Z
> "
>>>> dnPrettyNormal: <olcDatabase={3}monitor>
> => ldap_bv2dn(olcDatabase={3}monitor,0)
> <= ldap_bv2dn(olcDatabase={3}monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={3}monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(olcDatabase={3}monitor)=0
> <<< dnPrettyNormal: <olcDatabase={3}monitor>, <olcDatabase={3}monitor>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
>>>> dnNormalize: <cn=config>
> => ldap_bv2dn(cn=config,0)
> <= ldap_bv2dn(cn=config)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=config)=0
> <<< dnNormalize: <cn=config>
> <= str2entry(olcDatabase={3}monitor) -> 0x7fcb0f61d108
> => test_filter
> PRESENT
> => access_allowed: search access to "olcDatabase={3}monitor,cn=config"
> "objectClass" requested
> <= root access granted
> => access_allowed: search access granted by manage(=mwrscxd)
> <= test_filter 6
>>>> dnPrettyNormal: <cn=Monitor>
> => ldap_bv2dn(cn=Monitor,0)
> <= ldap_bv2dn(cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=monitor)=0
> <<< dnPrettyNormal: <cn=Monitor>, <cn=monitor>
> send_ldap_result: conn=-1 op=0 p=0
> send_ldap_result: err=0 matched="" text=""
> matching_rule_use_init
> 1.2.840.113556.1.4.804 (integerBitOrMatch): matchingRuleUse: (
> 1.2.840.113556.1.4.804 NAME 'integerBitOrMatch' APPLIES (
> supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $
> olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $
> olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $
> olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $
> olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $
> olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $
> olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $
> olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey
> $ olcChainMaxReferralDepth $ olcDbProtocolVersion $
> olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $
> shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire
> $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
> 1.2.840.113556.1.4.803 (integerBitAndMatch): matchingRuleUse: (
> 1.2.840.113556.1.4.803 NAME 'integerBitAndMatch' APPLIES (
> supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $
> olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $
> olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $
> olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $
> olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $
> olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $
> olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $
> olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey
> $ olcChainMaxReferralDepth $ olcDbProtocolVersion $
> olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $
> shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire
> $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
> 1.3.6.1.4.1.1466.109.114.2 (caseIgnoreIA5Match): matchingRuleUse: (
> 1.3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' APPLIES (
> altServer $ olcDbConfig $ mail $ dc $ associatedDomain $ email $
> aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $
> janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $
> memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $
> macAddress $ bootFile $ nisMapEntry ) )
> 1.3.6.1.4.1.1466.109.114.1 (caseExactIA5Match): matchingRuleUse: (
> 1.3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' APPLIES (
> altServer $ olcDbConfig $ mail $ dc $ associatedDomain $ email $
> aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $
> janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $
> memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $
> macAddress $ bootFile $ nisMapEntry ) )
> 2.5.13.39 (certificateListMatch): 2.5.13.38
> (certificateListExactMatch): matchingRuleUse: ( 2.5.13.38 NAME
> 'certificateListExactMatch' APPLIES ( authorityRevocationList $
> certificateRevocationList $ deltaRevocationList ) )
> 2.5.13.35 (certificateMatch): 2.5.13.34 (certificateExactMatch):
> matchingRuleUse: ( 2.5.13.34 NAME 'certificateExactMatch' APPLIES (
> userCertificate $ cACertificate ) )
> 2.5.13.30 (objectIdentifierFirstComponentMatch): matchingRuleUse: (
> 2.5.13.30 NAME 'objectIdentifierFirstComponentMatch' APPLIES (
> supportedControl $ supportedExtension $ supportedFeatures $
> ldapSyntaxes $ supportedApplicationContext ) )
> 2.5.13.29 (integerFirstComponentMatch): matchingRuleUse: ( 2.5.13.29
> NAME 'integerFirstComponentMatch' APPLIES ( supportedLDAPVersion $
> entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending
> $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $
> olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep
> $ olcIndexIntLen $ olcLocalSSF $ olcMaxDerefDepth $
> olcReplicationInterval $ olcSockbufMaxIncoming $
> olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $
> olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $
> olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $
> olcChainMaxReferralDepth $ olcDbProtocolVersion $
> olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $
> shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire
> $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
> 2.5.13.27 (generalizedTimeMatch): matchingRuleUse: ( 2.5.13.27 NAME
> 'generalizedTimeMatch' APPLIES ( createTimestamp $ modifyTimestamp ) )
> 2.5.13.24 (protocolInformationMatch): matchingRuleUse: ( 2.5.13.24
> NAME 'protocolInformationMatch' APPLIES protocolInformation )
> 2.5.13.23 (uniqueMemberMatch): matchingRuleUse: ( 2.5.13.23 NAME
> 'uniqueMemberMatch' APPLIES uniqueMember )
> 2.5.13.22 (presentationAddressMatch): matchingRuleUse: ( 2.5.13.22
> NAME 'presentationAddressMatch' APPLIES presentationAddress )
> 2.5.13.20 (telephoneNumberMatch): matchingRuleUse: ( 2.5.13.20 NAME
> 'telephoneNumberMatch' APPLIES ( telephoneNumber $ homePhone $ mobile
> $ pager ) )
> 2.5.13.17 (octetStringMatch): matchingRuleUse: ( 2.5.13.17 NAME
> 'octetStringMatch' APPLIES ( userPassword $ olcDbCryptKey ) )
> 2.5.13.16 (bitStringMatch): matchingRuleUse: ( 2.5.13.16 NAME
> 'bitStringMatch' APPLIES x500UniqueIdentifier )
> 2.5.13.14 (integerMatch): matchingRuleUse: ( 2.5.13.14 NAME
> 'integerMatch' APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $
> gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth
> $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $
> olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $
> olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $
> olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $
> olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $
> olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey
> $ olcChainMaxReferralDepth $ olcDbProtocolVersion $
> olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $
> shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire
> $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
> 2.5.13.13 (booleanMatch): matchingRuleUse: ( 2.5.13.13 NAME
> 'booleanMatch' APPLIES ( hasSubordinates $ olcAddContentAcl $
> olcGentleHUP $ olcHidden $ olcLastMod $ olcMirrorMode $ olcMonitoring
> $ olcReadOnly $ olcReverseLookup $ olcSyncUseSubentry $ olcDbChecksum
> $ olcDbNoSync $ olcDbDirtyRead $ olcDbLinearIndex $ olcChainCacheURI $
> olcChainReturnError $ olcDbRebindAsUser $ olcDbChaseReferrals $
> olcDbProxyWhoAmI $ olcDbSingleConn $ olcDbUseTemporaryConn $
> olcDbNoRefs $ olcDbNoUndefFilter ) )
> 2.5.13.11 (caseIgnoreListMatch): matchingRuleUse: ( 2.5.13.11 NAME
> 'caseIgnoreListMatch' APPLIES ( postalAddress $ registeredAddress $
> homePostalAddress ) )
> 2.5.13.8 (numericStringMatch): matchingRuleUse: ( 2.5.13.8 NAME
> 'numericStringMatch' APPLIES ( x121Address $ internationaliSDNNumber )
> )
> 2.5.13.7 (caseExactSubstringsMatch): matchingRuleUse: ( 2.5.13.7 NAME
> 'caseExactSubstringsMatch' APPLIES ( serialNumber $
> destinationIndicator $ dnQualifier ) )
> 2.5.13.6 (caseExactOrderingMatch): matchingRuleUse: ( 2.5.13.6 NAME
> 'caseExactOrderingMatch' APPLIES ( serialNumber $ destinationIndicator
> $ dnQualifier ) )
> 2.5.13.5 (caseExactMatch): matchingRuleUse: ( 2.5.13.5 NAME
> 'caseExactMatch' APPLIES ( supportedSASLMechanisms $ vendorName $
> vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $
> olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $
> olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $
> olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $
> olcDisallows $ olcDitContentRules $ olcInclude $ olcLdapSyntaxes $
> olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $
> olcObjectClasses $ olcObjectIdentifier $ olcOverlay $
> olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin
> $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $
> olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $
> olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm
> $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $
> olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $
> olcTimeLimit !
> $ olcTLSCACertificateFile $ olcTLSCACertificatePath $
> olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $
> olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $
> olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $
> olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $
> olcDbLockDetect $ olcDbMode $ olcChainingBehavior $ olcDbURI $
> olcDbStartTLS $ olcDbNetworkTimeout $ olcDbQuarantine $ olcDbACLPasswd $
> olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $
> olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $
> olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbCancel $
> olcDbIDAssertPassThru $ olcDbSocketPath $ olcDbSocketExtensions $
> knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $
> title $ businessCategory $ postalCode $ postOfficeBox $
> physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials
> $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pse!
> udonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $
> host $ documentIdentifier $ documentTitle $ documentVersion $
> documentLocation $ personalTitle $ co $ uniqueIdentifier $
> organizationalStatus $ buildingName $ documentPublisher $ carLicense $
> departmentNumber $ displayName $ employeeNumber $ employeeType $
> preferredLanguage $ ipServiceProtocol $ nisMapName $ mailNickname $
> sAMAccountName ) )
> 2.5.13.4 (caseIgnoreSubstringsMatch): matchingRuleUse: ( 2.5.13.4 NAME
> 'caseIgnoreSubstringsMatch' APPLIES ( serialNumber $
> destinationIndicator $ dnQualifier ) )
> 2.5.13.3 (caseIgnoreOrderingMatch): matchingRuleUse: ( 2.5.13.3 NAME
> 'caseIgnoreOrderingMatch' APPLIES ( serialNumber $
> destinationIndicator $ dnQualifier ) )
> 2.5.13.2 (caseIgnoreMatch): matchingRuleUse: ( 2.5.13.2 NAME
> 'caseIgnoreMatch' APPLIES ( supportedSASLMechanisms $ vendorName $
> vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $
> olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $
> olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $
> olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $
> olcDisallows $ olcDitContentRules $ olcInclude $ olcLdapSyntaxes $
> olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $
> olcObjectClasses $ olcObjectIdentifier $ olcOverlay $
> olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin
> $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $
> olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $
> olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm
> $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $
> olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $
> olcTimeLimi!
> t $ olcTLSCACertificateFile $ olcTLSCACertificatePath $
> olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $
> olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $
> olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $
> olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $
> olcDbLockDetect $ olcDbMode $ olcChainingBehavior $ olcDbURI $
> olcDbStartTLS $ olcDbNetworkTimeout $ olcDbQuarantine $ olcDbACLPasswd $
> olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $
> olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $
> olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbCancel $
> olcDbIDAssertPassThru $ olcDbSocketPath $ olcDbSocketExtensions $
> knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $
> title $ businessCategory $ postalCode $ postOfficeBox $
> physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials
> $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ p!
> seudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $
> host $ documentIdentifier $ documentTitle $ documentVersion $
> documentLocation $ personalTitle $ co $ uniqueIdentifier $
> organizationalStatus $ buildingName $ documentPublisher $ carLicense $
> departmentNumber $ displayName $ employeeNumber $ employeeType $
> preferredLanguage $ ipServiceProtocol $ nisMapName $ mailNickname $
> sAMAccountName ) )
> 1.2.36.79672281.1.13.3 (rdnMatch): 2.5.13.1
> (distinguishedNameMatch): matchingRuleUse: ( 2.5.13.1 NAME
> 'distinguishedNameMatch' APPLIES ( creatorsName $ modifiersName $
> subschemaSubentry $ entryDN $ namingContexts $ aliasedObjectName $
> dynamicSubtrees $ distinguishedName $ seeAlso $ olcDefaultSearchBase $
> olcRootDN $ olcSchemaDN $ olcSuffix $ olcUpdateDN $ olcDbACLAuthcDn $
> olcDbIDAssertAuthcDn $ olcRelay $ member $ owner $ roleOccupant $
> manager $ documentAuthor $ secretary $ associatedName $ dITRedirect $
> objectCategory ) )
> 2.5.13.0 (objectIdentifierMatch): matchingRuleUse: ( 2.5.13.0 NAME
> 'objectIdentifierMatch' APPLIES ( supportedControl $
> supportedExtension $ supportedFeatures $ supportedApplicationContext )
> )
> slapd startup: initiated.
> backend_startup_one: starting "cn=config"
> config_back_db_open
> Backend ACL: access to *
> by * none
>
> config_back_db_open: line 0: warning: cannot assess the validity of the
> ACL scope within backend naming context
> backend_startup_one: starting "dc=htc,dc=com"
> bdb_db_open: "dc=htc,dc=com"
> bdb_db_open: database "dc=htc,dc=com": dbenv_open(/var/lib/ldap/htc.com).
> backend_startup_one: starting "dc=internal"
> bdb_db_open: "dc=internal"
> bdb_db_open: warning - no DB_CONFIG file found in directory
> /var/lib/ldap/htc.internal: (2).
> Expect poor performance for suffix "dc=internal".
> bdb_db_open: database "dc=internal":
> dbenv_open(/var/lib/ldap/htc.internal).
> backend_startup_one: starting "cn=Monitor"
>>>> dnNormalize: <cn=Monitor>
> <<< dnNormalize: <cn=monitor>
>>>> dnPretty: <cn=Backends>
> => ldap_bv2dn(cn=Backends,0)
> <= ldap_bv2dn(cn=Backends)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Backends)=0
> <<< dnPretty: <cn=Backends>
>>>> dnNormalize: <cn=Backends>
> <<< dnNormalize: <cn=backends>
>>>> dnPretty: <cn=Connections>
> => ldap_bv2dn(cn=Connections,0)
> <= ldap_bv2dn(cn=Connections)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Connections)=0
> <<< dnPretty: <cn=Connections>
>>>> dnNormalize: <cn=Connections>
> <<< dnNormalize: <cn=connections>
>>>> dnPretty: <cn=Databases>
> => ldap_bv2dn(cn=Databases,0)
> <= ldap_bv2dn(cn=Databases)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Databases)=0
> <<< dnPretty: <cn=Databases>
>>>> dnNormalize: <cn=Databases>
> <<< dnNormalize: <cn=databases>
>>>> dnPretty: <cn=Listeners>
> => ldap_bv2dn(cn=Listeners,0)
> <= ldap_bv2dn(cn=Listeners)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Listeners)=0
> <<< dnPretty: <cn=Listeners>
>>>> dnNormalize: <cn=Listeners>
> <<< dnNormalize: <cn=listeners>
>>>> dnPretty: <cn=Log>
> => ldap_bv2dn(cn=Log,0)
> <= ldap_bv2dn(cn=Log)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Log)=0
> <<< dnPretty: <cn=Log>
>>>> dnNormalize: <cn=Log>
> <<< dnNormalize: <cn=log>
>>>> dnPretty: <cn=Operations>
> => ldap_bv2dn(cn=Operations,0)
> <= ldap_bv2dn(cn=Operations)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Operations)=0
> <<< dnPretty: <cn=Operations>
>>>> dnNormalize: <cn=Operations>
> <<< dnNormalize: <cn=operations>
>>>> dnPretty: <cn=Overlays>
> => ldap_bv2dn(cn=Overlays,0)
> <= ldap_bv2dn(cn=Overlays)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Overlays)=0
> <<< dnPretty: <cn=Overlays>
>>>> dnNormalize: <cn=Overlays>
> <<< dnNormalize: <cn=overlays>
>>>> dnPretty: <cn=SASL>
> => ldap_bv2dn(cn=SASL,0)
> <= ldap_bv2dn(cn=SASL)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=SASL)=0
> <<< dnPretty: <cn=SASL>
>>>> dnNormalize: <cn=SASL>
> <<< dnNormalize: <cn=sasl>
>>>> dnPretty: <cn=Statistics>
> => ldap_bv2dn(cn=Statistics,0)
> <= ldap_bv2dn(cn=Statistics)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Statistics)=0
> <<< dnPretty: <cn=Statistics>
>>>> dnNormalize: <cn=Statistics>
> <<< dnNormalize: <cn=statistics>
>>>> dnPretty: <cn=Threads>
> => ldap_bv2dn(cn=Threads,0)
> <= ldap_bv2dn(cn=Threads)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Threads)=0
> <<< dnPretty: <cn=Threads>
>>>> dnNormalize: <cn=Threads>
> <<< dnNormalize: <cn=threads>
>>>> dnPretty: <cn=Time>
> => ldap_bv2dn(cn=Time,0)
> <= ldap_bv2dn(cn=Time)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Time)=0
> <<< dnPretty: <cn=Time>
>>>> dnNormalize: <cn=Time>
> <<< dnNormalize: <cn=time>
>>>> dnPretty: <cn=TLS>
> => ldap_bv2dn(cn=TLS,0)
> <= ldap_bv2dn(cn=TLS)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=TLS)=0
> <<< dnPretty: <cn=TLS>
>>>> dnNormalize: <cn=TLS>
> <<< dnNormalize: <cn=tls>
>>>> dnPretty: <cn=Waiters>
> => ldap_bv2dn(cn=Waiters,0)
> <= ldap_bv2dn(cn=Waiters)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=Waiters)=0
> <<< dnPretty: <cn=Waiters>
>>>> dnNormalize: <cn=Waiters>
> <<< dnNormalize: <cn=waiters>
>>>> dnNormalize: <cn=Backend 0>
> <<< dnNormalize: <cn=backend 0>
>>>> dnNormalize: <cn=Database 0,cn=Databases,cn=Monitor>
> => ldap_bv2dn(cn=Database 0,cn=Databases,cn=Monitor,0)
> <= ldap_bv2dn(cn=Database 0,cn=Databases,cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=database 0,cn=databases,cn=monitor)=0
> <<< dnNormalize: <cn=database 0,cn=databases,cn=monitor>
>>>> dnNormalize: <cn=Backend 1>
> <<< dnNormalize: <cn=backend 1>
>>>> dnNormalize: <cn=Backend 2>
> <<< dnNormalize: <cn=backend 2>
>>>> dnNormalize: <cn=Database 3,cn=Databases,cn=Monitor>
> => ldap_bv2dn(cn=Database 3,cn=Databases,cn=Monitor,0)
> <= ldap_bv2dn(cn=Database 3,cn=Databases,cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=database 3,cn=databases,cn=monitor)=0
> <<< dnNormalize: <cn=database 3,cn=databases,cn=monitor>
>>>> dnNormalize: <cn=Backend 3>
> <<< dnNormalize: <cn=backend 3>
>>>> dnNormalize: <cn=Database 1,cn=Databases,cn=Monitor>
> => ldap_bv2dn(cn=Database 1,cn=Databases,cn=Monitor,0)
> <= ldap_bv2dn(cn=Database 1,cn=Databases,cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=database 1,cn=databases,cn=monitor)=0
> <<< dnNormalize: <cn=database 1,cn=databases,cn=monitor>
>>>> dnNormalize: <cn=Database 2,cn=Databases,cn=Monitor>
> => ldap_bv2dn(cn=Database 2,cn=Databases,cn=Monitor,0)
> <= ldap_bv2dn(cn=Database 2,cn=Databases,cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=database 2,cn=databases,cn=monitor)=0
> <<< dnNormalize: <cn=database 2,cn=databases,cn=monitor>
>>>> dnNormalize: <cn=Backend 4>
> <<< dnNormalize: <cn=backend 4>
>>>> dnNormalize: <cn=Backend 5>
> <<< dnNormalize: <cn=backend 5>
>>>> dnNormalize: <cn=Backend 6>
> <<< dnNormalize: <cn=backend 6>
>>>> dnNormalize: <cn=Backend 7>
> <<< dnNormalize: <cn=backend 7>
>>>> dnNormalize: <cn=Backend 8>
> <<< dnNormalize: <cn=backend 8>
>>>> dnNormalize: <cn=Backend 9>
> <<< dnNormalize: <cn=backend 9>
>>>> dnNormalize: <cn=Backend 10>
> <<< dnNormalize: <cn=backend 10>
>>>> dnNormalize: <cn=Backend 11>
> <<< dnNormalize: <cn=backend 11>
>>>> dnNormalize: <cn=Max File Descriptors>
> <<< dnNormalize: <cn=max file descriptors>
>>>> dnNormalize: <cn=Total>
> <<< dnNormalize: <cn=total>
>>>> dnNormalize: <cn=Current>
> <<< dnNormalize: <cn=current>
>>>> dnNormalize: <cn=Frontend>
> <<< dnNormalize: <cn=frontend>
>>>> dnNormalize: <cn=Database 0>
> <<< dnNormalize: <cn=database 0>
>>>> dnNormalize: <cn=Backend 0,cn=Backends,cn=Monitor>
> => ldap_bv2dn(cn=Backend 0,cn=Backends,cn=Monitor,0)
> <= ldap_bv2dn(cn=Backend 0,cn=Backends,cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=backend 0,cn=backends,cn=monitor)=0
> <<< dnNormalize: <cn=backend 0,cn=backends,cn=monitor>
>>>> dnNormalize: <cn=Database 1>
> <<< dnNormalize: <cn=database 1>
>>>> dnNormalize: <cn=Backend 3,cn=Backends,cn=Monitor>
> => ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor,0)
> <= ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=backend 3,cn=backends,cn=monitor)=0
> <<< dnNormalize: <cn=backend 3,cn=backends,cn=monitor>
>>>> dnNormalize: <cn=Database 2>
> <<< dnNormalize: <cn=database 2>
>>>> dnNormalize: <cn=Backend 3,cn=Backends,cn=Monitor>
> => ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor,0)
> <= ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=backend 3,cn=backends,cn=monitor)=0
> <<< dnNormalize: <cn=backend 3,cn=backends,cn=monitor>
>>>> dnNormalize: <cn=Database 3>
> <<< dnNormalize: <cn=database 3>
>>>> dnNormalize: <cn=Backend 2,cn=Backends,cn=Monitor>
> => ldap_bv2dn(cn=Backend 2,cn=Backends,cn=Monitor,0)
> <= ldap_bv2dn(cn=Backend 2,cn=Backends,cn=Monitor)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(cn=backend 2,cn=backends,cn=monitor)=0
> <<< dnNormalize: <cn=backend 2,cn=backends,cn=monitor>
>>>> dnNormalize: <cn=Listener 0>
> <<< dnNormalize: <cn=listener 0>
>>>> dnNormalize: <cn=Listener 1>
> <<< dnNormalize: <cn=listener 1>
>>>> dnNormalize: <cn=Bind>
> <<< dnNormalize: <cn=bind>
>>>> dnNormalize: <cn=Unbind>
> <<< dnNormalize: <cn=unbind>
>>>> dnNormalize: <cn=Search>
> <<< dnNormalize: <cn=search>
>>>> dnNormalize: <cn=Compare>
> <<< dnNormalize: <cn=compare>
>>>> dnNormalize: <cn=Modify>
> <<< dnNormalize: <cn=modify>
>>>> dnNormalize: <cn=Modrdn>
> <<< dnNormalize: <cn=modrdn>
>>>> dnNormalize: <cn=Add>
> <<< dnNormalize: <cn=add>
>>>> dnNormalize: <cn=Delete>
> <<< dnNormalize: <cn=delete>
>>>> dnNormalize: <cn=Abandon>
> <<< dnNormalize: <cn=abandon>
>>>> dnNormalize: <cn=Extended>
> <<< dnNormalize: <cn=extended>
>>>> dnNormalize: <cn=Overlay 0>
> <<< dnNormalize: <cn=overlay 0>
>>>> dnNormalize: <cn=Overlay 1>
> <<< dnNormalize: <cn=overlay 1>
>>>> dnNormalize: <cn=Overlay 2>
> <<< dnNormalize: <cn=overlay 2>
>>>> dnNormalize: <cn=Overlay 3>
> <<< dnNormalize: <cn=overlay 3>
>>>> dnNormalize: <cn=Bytes>
> <<< dnNormalize: <cn=bytes>
>>>> dnNormalize: <cn=PDU>
> <<< dnNormalize: <cn=pdu>
>>>> dnNormalize: <cn=Entries>
> <<< dnNormalize: <cn=entries>
>>>> dnNormalize: <cn=Referrals>
> <<< dnNormalize: <cn=referrals>
>>>> dnNormalize: <cn=Max>
> <<< dnNormalize: <cn=max>
>>>> dnNormalize: <cn=Max Pending>
> <<< dnNormalize: <cn=max pending>
>>>> dnNormalize: <cn=Open>
> <<< dnNormalize: <cn=open>
>>>> dnNormalize: <cn=Starting>
> <<< dnNormalize: <cn=starting>
>>>> dnNormalize: <cn=Active>
> <<< dnNormalize: <cn=active>
>>>> dnNormalize: <cn=Pending>
> <<< dnNormalize: <cn=pending>
>>>> dnNormalize: <cn=Backload>
> <<< dnNormalize: <cn=backload>
>>>> dnNormalize: <cn=State>
> <<< dnNormalize: <cn=state>
>>>> dnNormalize: <cn=Runqueue>
> <<< dnNormalize: <cn=runqueue>
>>>> dnNormalize: <cn=Tasklist>
> <<< dnNormalize: <cn=tasklist>
>>>> dnNormalize: <cn=Start>
> <<< dnNormalize: <cn=start>
>>>> dnNormalize: <cn=Current>
> <<< dnNormalize: <cn=current>
>>>> dnNormalize: <cn=Uptime>
> <<< dnNormalize: <cn=uptime>
>>>> dnNormalize: <cn=Read>
> <<< dnNormalize: <cn=read>
>>>> dnNormalize: <cn=Write>
> <<< dnNormalize: <cn=write>
> slapd starting
> daemon: added 4r listener=(nil)
> daemon: added 7r listener=0x7fcb0f5bc2d0
> daemon: added 8r listener=0x7fcb0f5bc390
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: activity on 1 descriptor
> daemon: activity on:
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: activity on 1 descriptor
> daemon: activity on:
> slap_listener_activate(7):
> daemon: epoll: listen=7 busy
> daemon: epoll: listen=8 active_threads=0 tvp=zero
>>>> slap_listener(ldap:///)
> daemon: activity on 1 descriptor
> daemon: activity on:daemon: listen=7, new connection on 16
>
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: added 16r (active) listener=(nil)
> conn=1000 fd=16 ACCEPT from IP=172.24.10.201:23867 (IP=0.0.0.0:389)
> daemon: activity on 1 descriptor
> daemon: activity on:
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: activity on 1 descriptor
> daemon: activity on: 16r
> daemon: read active on 16
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> connection_get(16)
> connection_get(16): got connid=1000
> connection_read(16): checking for input on id=1000
> ber_get_next
> ldap_read: want=8, got=8
> 0000: 30 60 02 01 01 60 33 02 0`...`3.
> ldap_read: want=90, got=90
> 0000: 01 03 04 19 75 69 64 3d 4e 75 50 6f 69 6e 74 2c
> ....uid=NuPoint,
> 0010: 64 63 3d 68 74 63 2c 64 63 3d 63 6f 6d 80 13 64
> dc=htc,dc=com..d
> 0020: 65 63 20 31 33 20 32 30 31 32 20 63 72 65 61 74 ec 13 2012
> creat
> 0030: 65 64 a0 26 30 24 04 16 31 2e 32 2e 38 34 30 2e
> ed.&0$..1.2.840.
> 0040: 31 31 33 35 35 36 2e 31 2e 34 2e 33 31 39 01 01
> 113556.1.4.319..
> 0050: ff 04 07 30 05 02 01 0a 04 00 ...0......
> ber_get_next: tag 0x30 len 96 contents:
> ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000920 end=0x7fcad8000980 len=96
> 0000: 02 01 01 60 33 02 01 03 04 19 75 69 64 3d 4e 75
> ...`3.....uid=Nu
> 0010: 50 6f 69 6e 74 2c 64 63 3d 68 74 63 2c 64 63 3d
> Point,dc=htc,dc=
> 0020: 63 6f 6d 80 13 64 65 63 20 31 33 20 32 30 31 32 com..dec 13
> 2012
> 0030: 20 63 72 65 61 74 65 64 a0 26 30 24 04 16 31 2e
> created.&0$..1.
> 0040: 32 2e 38 34 30 2e 31 31 33 35 35 36 2e 31 2e 34
> 2.840.113556.1.4
> 0050: 2e 33 31 39 01 01 ff 04 07 30 05 02 01 0a 04 00
> .319.....0......
> op tag 0x60, time 1355857467
> ber_get_next
> ldap_read: want=8 error=Resource temporarily unavailable
> daemon: activity on 1 descriptor
> daemon: activity on:
> conn=1000 op=0 do_bind
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> ber_scanf fmt ({imt) ber:
> ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000923 end=0x7fcad8000980 len=93
> 0000: 60 33 02 01 03 04 19 75 69 64 3d 4e 75 50 6f 69
> `3.....uid=NuPoi
> 0010: 6e 74 2c 64 63 3d 68 74 63 2c 64 63 3d 63 6f 6d
> nt,dc=htc,dc=com
> 0020: 80 13 64 65 63 20 31 33 20 32 30 31 32 20 63 72 ..dec 13 2012
> cr
> 0030: 65 61 74 65 64 a0 26 30 24 04 16 31 2e 32 2e 38
> eated.&0$..1.2.8
> 0040: 34 30 2e 31 31 33 35 35 36 2e 31 2e 34 2e 33 31
> 40.113556.1.4.31
> 0050: 39 01 01 ff 04 07 30 05 02 01 0a 04 00 9.....0......
> ber_scanf fmt (m}) ber:
> ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000943 end=0x7fcad8000980 len=61
> 0000: 00 13 64 65 63 20 31 33 20 32 30 31 32 20 63 72 ..dec 13 2012
> cr
> 0010: 65 61 74 65 64 a0 26 30 24 04 16 31 2e 32 2e 38
> eated.&0$..1.2.8
> 0020: 34 30 2e 31 31 33 35 35 36 2e 31 2e 34 2e 33 31
> 40.113556.1.4.31
> 0030: 39 01 01 ff 04 07 30 05 02 01 0a 04 00 9.....0......
> => get_ctrls
> ber_scanf fmt ({m) ber:
> ber_dump: buf=0x7fcad8000920 ptr=0x7fcad800095a end=0x7fcad8000980 len=38
> 0000: 30 24 04 16 31 2e 32 2e 38 34 30 2e 31 31 33 35
> 0$..1.2.840.1135
> 0010: 35 36 2e 31 2e 34 2e 33 31 39 01 01 ff 04 07 30
> 56.1.4.319.....0
> 0020: 05 02 01 0a 04 00 ......
> ber_scanf fmt (b) ber:
> ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000974 end=0x7fcad8000980 len=12
> 0000: 00 01 ff 04 07 30 05 02 01 0a 04 00 .....0......
> ber_scanf fmt (m) ber:
> ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000977 end=0x7fcad8000980 len=9
> 0000: 04 07 30 05 02 01 0a 04 00 ..0......
> => get_ctrls: oid="1.2.840.113556.1.4.319" (critical)
> <= get_ctrls: n=1 rc=12 err="critical extension is unavailable"
> send_ldap_result: conn=1000 op=0 p=3
> send_ldap_result: err=12 matched="" text="critical extension is
> unavailable"
> send_ldap_response: msgid=1 tag=97 err=12
> ber_flush2: 47 bytes to sd 16
> 0000: 30 2d 02 01 01 61 28 0a 01 0c 04 00 04 21 63 72
> 0-...a(......!cr
> 0010: 69 74 69 63 61 6c 20 65 78 74 65 6e 73 69 6f 6e itical
> extension
> 0020: 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 is
> unavailable
> ldap_write: want=47, written=47
> 0000: 30 2d 02 01 01 61 28 0a 01 0c 04 00 04 21 63 72
> 0-...a(......!cr
> 0010: 69 74 69 63 61 6c 20 65 78 74 65 6e 73 69 6f 6e itical
> extension
> 0020: 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 is
> unavailable
> conn=1000 op=0 RESULT tag=97 err=12 text=critical extension is unavailable
> conn=1000 op=0 do_bind: get_ctrls failed
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> daemon: activity on 1 descriptor
> daemon: activity on: 16r
> daemon: read active on 16
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> connection_get(16)
> connection_get(16): got connid=1000
> connection_read(16): checking for input on id=1000
> ber_get_next
> ldap_read: want=8, got=0
>
> ber_get_next on fd 16 failed errno=0 (Success)
> connection_read(16): input error=-2 id=1000, closing.
> connection_closing: readying conn=1000 sd=16 for close
> connection_close: conn=1000 sd=16
> daemon: activity on 1 descriptor
> daemon: activity on:
> daemon: removing 16
> conn=1000 fd=16 closed (connection lost)
> daemon: epoll: listen=7 active_threads=0 tvp=zero
> daemon: epoll: listen=8 active_threads=0 tvp=zero
> ^Cdaemon: shutdown requested and initiated.
> daemon: closing 7
> daemon: closing 8
> slapd shutdown: waiting for 0 operations/tasks to finish
> slapd shutdown: initiated
> ====> bdb_cache_release_all
> ====> bdb_cache_release_all
> slapd destroy: freeing system resources.
> slapd stopped.
> [root@radius1 openldap]# exit
> exit
>
> Script done on Tue 18 Dec 2012 03:06:10 PM EST
>
>
>
> **********************************************************************
> HTC Disclaimer: The information contained in this message may be
> privileged and confidential and protected from disclosure. If the reader
> of this message is not the intended recipient, or an employee or agent
> responsible for delivering this message to the intended recipient, you are
> hereby notified that any dissemination, distribution or copying of this
> communication is strictly prohibited. If you have received this
> communication in error, please notify us immediately by replying to the
> message and deleting it from your computer. Thank you.
> **********************************************************************
>
>
>
>
>
--
Pierangelo Masarati
Associate Professor
Dipartimento di Ingegneria Aerospaziale
Politecnico di Milano