You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Thorsten Kampe (JIRA)" <ji...@apache.org> on 2009/07/13 13:57:15 UTC
[jira] Created: (DIRSERVER-1380) Apache DS sending values in
response to "no values" query
Apache DS sending values in response to "no values" query
---------------------------------------------------------
Key: DIRSERVER-1380
URL: https://issues.apache.org/jira/browse/DIRSERVER-1380
Project: Directory ApacheDS
Issue Type: Bug
Affects Versions: 1.5.4
Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
Reporter: Thorsten Kampe
Apache DS replies with values although I specifically request not to:
[1]>>> import ldap
[2]>>> connection = ldap.initialize('ldap://')
[3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
[3] (97, [])
[4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE,
filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
[4]
[('uid=admin,ou=system', {'cn': ['system administrator']}),
('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]
But in contrast OpenLDAP's ldapsearch -A works as expected:
~/.ldaprc
BASE ou=system
BINDDN uid=admin,ou=system
URI ldap://
thorsten@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
dn: uid=admin,ou=system
cn:
dn: cn=Administrators,ou=groups,ou=system
cn:
The same query works (does not return values) if I query an Active Directory or eDirectory server.
As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the Python-LDAP mailing list and the developer's analysis says "it's an Apache DS bug". ("I did and watching the LDAP traffic with Wireshark shows that ApacheDS returns the attribute values although searchRequest::typesOnly is True
on the wire. In opposite to that OpenLDAP's slapd does not return any attribute values in this case.")
Please read his full statement here: http://sourceforge.net/mailarchive/forum.php?thread_name=4A5B192E.3010005%40stroeder.com&forum_name=python-ldap-dev
Thorsten
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (DIRSERVER-1380) Apache DS sending values in
response to "no values" query
Posted by "Kiran Ayyagari (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1380?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Kiran Ayyagari resolved DIRSERVER-1380.
---------------------------------------
Resolution: Fixed
Fixed here http://svn.apache.org/viewvc?rev=915970&view=rev
Thanks Thorsten for the report and sample test
> Apache DS sending values in response to "no values" query
> ---------------------------------------------------------
>
> Key: DIRSERVER-1380
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1380
> Project: Directory ApacheDS
> Issue Type: Bug
> Affects Versions: 1.5.4
> Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
> Reporter: Thorsten Kampe
> Assignee: Kiran Ayyagari
> Fix For: 2.0.0-RC1
>
>
> Apache DS replies with values although I specifically request not to:
> [1]>>> import ldap
> [2]>>> connection = ldap.initialize('ldap://')
> [3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
> [3] (97, [])
> [4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE,
> filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
> [4]
> [('uid=admin,ou=system', {'cn': ['system administrator']}),
> ('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]
> But in contrast OpenLDAP's ldapsearch -A works as expected:
> ~/.ldaprc
> BASE ou=system
> BINDDN uid=admin,ou=system
> URI ldap://
> thorsten@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
> dn: uid=admin,ou=system
> cn:
> dn: cn=Administrators,ou=groups,ou=system
> cn:
> The same query works (does not return values) if I query an Active Directory or eDirectory server.
> As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the Python-LDAP mailing list and the developer's analysis says "it's an Apache DS bug". ("I did and watching the LDAP traffic with Wireshark shows that ApacheDS returns the attribute values although searchRequest::typesOnly is True
> on the wire. In opposite to that OpenLDAP's slapd does not return any attribute values in this case.")
> Please read his full statement here: http://sourceforge.net/mailarchive/forum.php?thread_name=4A5B192E.3010005%40stroeder.com&forum_name=python-ldap-dev
> Thorsten
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DIRSERVER-1380) Apache DS sending values in
response to "no values" query
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1380?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Emmanuel Lecharny updated DIRSERVER-1380:
-----------------------------------------
Fix Version/s: 1.5.5
Definitively an ADS bug !
Thanks for the report. Let's try to get it fixed for 1.5.5
> Apache DS sending values in response to "no values" query
> ---------------------------------------------------------
>
> Key: DIRSERVER-1380
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1380
> Project: Directory ApacheDS
> Issue Type: Bug
> Affects Versions: 1.5.4
> Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
> Reporter: Thorsten Kampe
> Fix For: 1.5.5
>
>
> Apache DS replies with values although I specifically request not to:
> [1]>>> import ldap
> [2]>>> connection = ldap.initialize('ldap://')
> [3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
> [3] (97, [])
> [4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE,
> filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
> [4]
> [('uid=admin,ou=system', {'cn': ['system administrator']}),
> ('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]
> But in contrast OpenLDAP's ldapsearch -A works as expected:
> ~/.ldaprc
> BASE ou=system
> BINDDN uid=admin,ou=system
> URI ldap://
> thorsten@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
> dn: uid=admin,ou=system
> cn:
> dn: cn=Administrators,ou=groups,ou=system
> cn:
> The same query works (does not return values) if I query an Active Directory or eDirectory server.
> As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the Python-LDAP mailing list and the developer's analysis says "it's an Apache DS bug". ("I did and watching the LDAP traffic with Wireshark shows that ApacheDS returns the attribute values although searchRequest::typesOnly is True
> on the wire. In opposite to that OpenLDAP's slapd does not return any attribute values in this case.")
> Please read his full statement here: http://sourceforge.net/mailarchive/forum.php?thread_name=4A5B192E.3010005%40stroeder.com&forum_name=python-ldap-dev
> Thorsten
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Assigned: (DIRSERVER-1380) Apache DS sending values in
response to "no values" query
Posted by "Kiran Ayyagari (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1380?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Kiran Ayyagari reassigned DIRSERVER-1380:
-----------------------------------------
Assignee: Kiran Ayyagari
> Apache DS sending values in response to "no values" query
> ---------------------------------------------------------
>
> Key: DIRSERVER-1380
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1380
> Project: Directory ApacheDS
> Issue Type: Bug
> Affects Versions: 1.5.4
> Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
> Reporter: Thorsten Kampe
> Assignee: Kiran Ayyagari
> Fix For: 2.0.0-RC1
>
>
> Apache DS replies with values although I specifically request not to:
> [1]>>> import ldap
> [2]>>> connection = ldap.initialize('ldap://')
> [3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
> [3] (97, [])
> [4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE,
> filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
> [4]
> [('uid=admin,ou=system', {'cn': ['system administrator']}),
> ('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]
> But in contrast OpenLDAP's ldapsearch -A works as expected:
> ~/.ldaprc
> BASE ou=system
> BINDDN uid=admin,ou=system
> URI ldap://
> thorsten@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
> dn: uid=admin,ou=system
> cn:
> dn: cn=Administrators,ou=groups,ou=system
> cn:
> The same query works (does not return values) if I query an Active Directory or eDirectory server.
> As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the Python-LDAP mailing list and the developer's analysis says "it's an Apache DS bug". ("I did and watching the LDAP traffic with Wireshark shows that ApacheDS returns the attribute values although searchRequest::typesOnly is True
> on the wire. In opposite to that OpenLDAP's slapd does not return any attribute values in this case.")
> Please read his full statement here: http://sourceforge.net/mailarchive/forum.php?thread_name=4A5B192E.3010005%40stroeder.com&forum_name=python-ldap-dev
> Thorsten
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DIRSERVER-1380) Apache DS sending values in
response to "no values" query
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1380?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Emmanuel Lecharny updated DIRSERVER-1380:
-----------------------------------------
Fix Version/s: (was: 1.5.5)
2.0.0-RC1
Postponed to 2.0.0-RC1
> Apache DS sending values in response to "no values" query
> ---------------------------------------------------------
>
> Key: DIRSERVER-1380
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1380
> Project: Directory ApacheDS
> Issue Type: Bug
> Affects Versions: 1.5.4
> Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
> Reporter: Thorsten Kampe
> Fix For: 2.0.0-RC1
>
>
> Apache DS replies with values although I specifically request not to:
> [1]>>> import ldap
> [2]>>> connection = ldap.initialize('ldap://')
> [3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
> [3] (97, [])
> [4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE,
> filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
> [4]
> [('uid=admin,ou=system', {'cn': ['system administrator']}),
> ('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]
> But in contrast OpenLDAP's ldapsearch -A works as expected:
> ~/.ldaprc
> BASE ou=system
> BINDDN uid=admin,ou=system
> URI ldap://
> thorsten@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
> dn: uid=admin,ou=system
> cn:
> dn: cn=Administrators,ou=groups,ou=system
> cn:
> The same query works (does not return values) if I query an Active Directory or eDirectory server.
> As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the Python-LDAP mailing list and the developer's analysis says "it's an Apache DS bug". ("I did and watching the LDAP traffic with Wireshark shows that ApacheDS returns the attribute values although searchRequest::typesOnly is True
> on the wire. In opposite to that OpenLDAP's slapd does not return any attribute values in this case.")
> Please read his full statement here: http://sourceforge.net/mailarchive/forum.php?thread_name=4A5B192E.3010005%40stroeder.com&forum_name=python-ldap-dev
> Thorsten
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (DIRSERVER-1380) Apache DS sending values in
response to "no values" query
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1380?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Emmanuel Lecharny closed DIRSERVER-1380.
----------------------------------------
> Apache DS sending values in response to "no values" query
> ---------------------------------------------------------
>
> Key: DIRSERVER-1380
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1380
> Project: Directory ApacheDS
> Issue Type: Bug
> Affects Versions: 1.5.4
> Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
> Reporter: Thorsten Kampe
> Assignee: Kiran Ayyagari
> Fix For: 2.0.0-RC1
>
>
> Apache DS replies with values although I specifically request not to:
> [1]>>> import ldap
> [2]>>> connection = ldap.initialize('ldap://')
> [3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
> [3] (97, [])
> [4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE,
> filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
> [4]
> [('uid=admin,ou=system', {'cn': ['system administrator']}),
> ('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]
> But in contrast OpenLDAP's ldapsearch -A works as expected:
> ~/.ldaprc
> BASE ou=system
> BINDDN uid=admin,ou=system
> URI ldap://
> thorsten@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
> dn: uid=admin,ou=system
> cn:
> dn: cn=Administrators,ou=groups,ou=system
> cn:
> The same query works (does not return values) if I query an Active Directory or eDirectory server.
> As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the Python-LDAP mailing list and the developer's analysis says "it's an Apache DS bug". ("I did and watching the LDAP traffic with Wireshark shows that ApacheDS returns the attribute values although searchRequest::typesOnly is True
> on the wire. In opposite to that OpenLDAP's slapd does not return any attribute values in this case.")
> Please read his full statement here: http://sourceforge.net/mailarchive/forum.php?thread_name=4A5B192E.3010005%40stroeder.com&forum_name=python-ldap-dev
> Thorsten
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.