You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Kiran Ayyagari (JIRA)" <ji...@apache.org> on 2010/02/24 21:41:28 UTC

[jira] Resolved: (DIRSERVER-1380) Apache DS sending values in response to "no values" query

     [ https://issues.apache.org/jira/browse/DIRSERVER-1380?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kiran Ayyagari resolved DIRSERVER-1380.
---------------------------------------

    Resolution: Fixed

Fixed here http://svn.apache.org/viewvc?rev=915970&view=rev

Thanks Thorsten for the report and sample test

> Apache DS sending values in response to "no values" query
> ---------------------------------------------------------
>
>                 Key: DIRSERVER-1380
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1380
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 1.5.4
>         Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
>            Reporter: Thorsten Kampe
>            Assignee: Kiran Ayyagari
>             Fix For: 2.0.0-RC1
>
>
> Apache DS replies with values although I specifically request not to:
> [1]>>> import ldap
> [2]>>> connection = ldap.initialize('ldap://')
> [3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
> [3]    (97, [])
> [4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE, 
> filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
> [4]
> [('uid=admin,ou=system', {'cn': ['system administrator']}),
>  ('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]
> But in contrast OpenLDAP's ldapsearch -A works as expected:
> ~/.ldaprc
> BASE    ou=system
> BINDDN  uid=admin,ou=system
> URI     ldap://
> thorsten@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
> dn: uid=admin,ou=system
> cn:
> dn: cn=Administrators,ou=groups,ou=system
> cn:
> The same query works (does not return values) if I query an Active Directory or eDirectory server.
> As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the Python-LDAP mailing list and the developer's analysis says "it's an Apache DS bug". ("I did and watching the LDAP traffic with Wireshark shows that ApacheDS returns the attribute values although searchRequest::typesOnly is True
> on the wire. In opposite to that OpenLDAP's slapd does not return any attribute values in this case.")
> Please read his full statement here: http://sourceforge.net/mailarchive/forum.php?thread_name=4A5B192E.3010005%40stroeder.com&forum_name=python-ldap-dev
> Thorsten

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.