[ https://issues.apache.org/jira/browse/DIRSERVER-1214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12838870#action_12838870 ] 

Emmanuel Lecharny commented on DIRSERVER-1214:
----------------------------------------------

RFC 4512, par. 5.1 stipulates that "The root DSE SHALL NOT be included if the client performs a subtree search starting from the root." and that implicitely implies that you *can* do a search with an empty baseDN

AFAICT, there is nothing specific about ONE_LEVEL search based on rootDSE, and NamingContexts, in the RFC. My interpretation is :
The ONE level should start on NamingContext, not on the RDN forming their DN (ie, if a NamingContext is dc=example,dc=com, we should start at dc=example, not at dc=com).


> Searches done with an empty baseDN are not accepted, except for the rootDSE
> ---------------------------------------------------------------------------
>
>                 Key: DIRSERVER-1214
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1214
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 1.5.3
>            Reporter: Emmanuel Lecharny
>             Fix For: 1.5.6
>
>
> We can't do a search with an empty baseDN, when it's not specifically a rootDSE search (ie, (objectClass=*) and scope=OBJECT).
> We should consider that such a search is spreaded on all the partitions.
> This is not easy to implement without the nested partitions, as the current existing partitions are potentially stoed in different backends.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.