referral bug (ITS#1234)

[markwhitehouse@home.com]

Full_Name: Mark Whitehouse
Version: 2.0.11
OS: Redhat Linux 6.2
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (207.110.22.187)


Hi,

The following describes a problem with referrals using:

  OpenLDAP 2.0.11
  RH Linux 6.2

The problem involves searches in the presence of more than one 
referral.  Here is a description:

The following (contrived) directory structure, has three slapd
processes linked together by two referrals.

  Main slapd process
  ------------------

           dc=foo,dc=com
               |
     ref: ldap://ip:9009/ou=g1


  slapd 9009
  ----------

         ou=g1,dc=foo,dc=com
                  |
   ou=people   ou=devices   ref:ldap://ip:9010/ou=groups


  slapd 9010
  ----------

      ou=groups,ou=g1,dc=foo,dc=com
                   |
           ou=x   ou=y   ou=z

Here are the problems:

1) The following search:

  $ ldapsearch -P 3 -C -s one -b 'ou=groups,ou=g1,dc=foo,dc=com' 
    '(objectclass=*)'

should return the entries under ou=groups, that is:
   ou=x, ou=y, ou=z

instead, the search returns:
   ou=people, ou=devices, ou=groups

2) The following search:

  $ ldapsearch -P 3 -C -s sub -b 'ou=groups,ou=g1,dc=foo,dc=com' 
    '(objectclass=*)'

should return the entries:
   ou=groups, ou=x, ou=y, ou=z

instead it returns:
   ou=g1, ou=people, ou=devices, ou=groups, ou=x, ou=y, ou=z


It seems that, in general the problem is related to searches which 
involve chasing multiple referrals.  Chasing one referral now 
(after 2.0.6) seems to work fine.


Mark