directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Emmanuel Lecharny (JIRA)" <j...@apache.org>
Subject [jira] Updated: (DIRSERVER-1380) Apache DS sending values in response to "no values" query
Date Wed, 05 Aug 2009 23:17:14 GMT

     [ https://issues.apache.org/jira/browse/DIRSERVER-1380?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Emmanuel Lecharny updated DIRSERVER-1380:
-----------------------------------------

    Fix Version/s: 1.5.5

Definitively an ADS bug ! 

Thanks for the report. Let's try to get it fixed for 1.5.5

> Apache DS sending values in response to "no values" query
> ---------------------------------------------------------
>
>                 Key: DIRSERVER-1380
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1380
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 1.5.4
>         Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
>            Reporter: Thorsten Kampe
>             Fix For: 1.5.5
>
>
> Apache DS replies with values although I specifically request not to:
> [1]>>> import ldap
> [2]>>> connection = ldap.initialize('ldap://')
> [3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
> [3]    (97, [])
> [4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE, 
> filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
> [4]
> [('uid=admin,ou=system', {'cn': ['system administrator']}),
>  ('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]
> But in contrast OpenLDAP's ldapsearch -A works as expected:
> ~/.ldaprc
> BASE    ou=system
> BINDDN  uid=admin,ou=system
> URI     ldap://
> thorsten@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
> dn: uid=admin,ou=system
> cn:
> dn: cn=Administrators,ou=groups,ou=system
> cn:
> The same query works (does not return values) if I query an Active Directory or eDirectory
server.
> As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the Python-LDAP
mailing list and the developer's analysis says "it's an Apache DS bug". ("I did and watching
the LDAP traffic with Wireshark shows that ApacheDS returns the attribute values although
searchRequest::typesOnly is True
> on the wire. In opposite to that OpenLDAP's slapd does not return any attribute values
in this case.")
> Please read his full statement here: http://sourceforge.net/mailarchive/forum.php?thread_name=4A5B192E.3010005%40stroeder.com&forum_name=python-ldap-dev
> Thorsten

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message