You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by Martin Marcher <ma...@gmail.com> on 2007/05/08 21:03:32 UTC
Alias Problem "failed on search operation: attributeType w/ OID 1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Hello,
freshly installed apacheds 1.5, I started the server with
./bin/server.init debug and the output stays empty upon searching with
the line below so i can't really provide more info - better don't know
how to provide more info. Using debian stable:
I tried that search with the indexes from the
examplePartitionConfiguration and without them (first not having
indexes then adding them to the server.xml and restarting apacheds,
still no go). Now am I missing something big here or why is this
search not working?
Working on Debian Etch here, java package is the original sun java
package, FS is xfs inside a xen instance, 128MB of RAM 768MB of swap.
$ java -version
java version "1.6.0_01"
Java(TM) SE Runtime Environment (build 1.6.0_01-b06)
Java HotSpot(TM) 64-Bit Server VM (build 1.6.0_01-b06, mixed mode)
$ ldapsearch -VV
ldapsearch: @(#) $OpenLDAP: ldapsearch 2.3.30 (Mar 9 2007 06:09:26) $
buildd@excelsior:/build/buildd/openldap2.3-2.3.30/debian/build/clients/tools
(LDAP library: OpenLDAP 20330)
$ ldapsearch -h localhost -p 10389 -D "uid=admin,ou=system" -w secret
-b "ou=system" -s one -x "(uid=admin)" dn
# extended LDIF
#
# LDAPv3
# base <ou=system> with scope oneLevel
# filter: (uid=admin)
# requesting: dn
#
# search result
search: 2
result: 33 Alias problem
text: failed on search operation: attributeType w/ OID 1.3.6.1.4.1.1466.115.1
21.1.12 not registered!
# numResponses: 1
--snip server.xml--
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN"
"http://www.springframework.org/dtd/spring-beans.dtd">
<beans>
<bean id="environment"
class="org.springframework.beans.factory.config.PropertiesFactoryBean">
<property name="properties">
<props>
<prop key="java.naming.security.authentication">simple</prop>
<prop key="java.naming.security.principal">uid=admin,ou=system</prop>
<prop key="java.naming.security.credentials">secret</prop>
</props>
</property>
</bean>
<bean id="configuration"
class="org.apache.directory.server.configuration.MutableServerStartupConfiguration">
<property name="workingDirectory" value="example.com" />
<value>example.ldif</value>
</property>
<property name="ldifFilters">
<list>
<bean class="org.apache.directory.server.protocol.shared.store.Krb5KdcEntryFilter"/>
</list>
</property>-->
<property name="synchPeriodMillis" value="15000" />
<property name="maxTimeLimit" value="15000" />
<property name="maxSizeLimit" value="1000" />
<property name="maxThreads" value="8" />
<property name="allowAnonymousAccess" value="false" />
<property name="accessControlEnabled" value="false" />
<property name="enableNtp" value="false" />
<property name="enableKerberos" value="false" />
<property name="enableChangePassword" value="false" />
<property name="denormalizeOpAttrsEnabled" value="true" />
<property name="ldapPort" value="10389" />
<property name="systemPartitionConfiguration"
ref="systemPartitionConfiguration" />
<property name="partitionConfigurations">
<set>
<ref bean="examplePartitionConfiguration"/>
<ref bean="openForcePartitionConfiguration"/>
<ref bean="sevenSeasPartitionConfiguration"/>
</set>
</property>
<property name="extendedOperationHandlers">
<list>
<bean class="org.apache.directory.server.ldap.support.extended.GracefulShutdownHandler"/>
<bean class="org.apache.directory.server.ldap.support.extended.LaunchDiagnosticUiHandler"/>
</list>
</property>
<property name="interceptorConfigurations">
<list>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="normalizationService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.normalization.NormalizationService"
/>
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="authenticationService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.authn.AuthenticationService"
/>
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="referralService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.referral.ReferralService" />
</property>
<property name="ldapPort" value="10389" />
<property name="systemPartitionConfiguration"
ref="systemPartitionConfiguration" />
<property name="partitionConfigurations">
<set>
<ref bean="examplePartitionConfiguration"/>
<ref bean="openForcePartitionConfiguration"/>
<ref bean="sevenSeasPartitionConfiguration"/>
</set>
</property>
<property name="extendedOperationHandlers">
<list>
<bean class="org.apache.directory.server.ldap.support.extended.GracefulShutdownHandler"/>
<bean class="org.apache.directory.server.ldap.support.extended.LaunchDiagnosticUiHandler"/>
</list>
</property>
<property name="interceptorConfigurations">
<list>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="normalizationService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.normalization.NormalizationService"
/>
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="authenticationService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.authn.AuthenticationService"
/>
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="referralService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.referral.ReferralService" />
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="authorizationService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.authz.AuthorizationService" />
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="defaultAuthorizationService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.authz.DefaultAuthorizationService"
/>
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="exceptionService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.exception.ExceptionService" />
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="operationalAttributeService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.operational.OperationalAttributeService"
/>
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="schemaService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.schema.SchemaService" />
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="subentryService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.subtree.SubentryService" />
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="collectiveAttributeService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.collective.CollectiveAttributeService"
/>
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="eventService" />
<property name="interceptor">
<bean class="org.apache.directory.server.core.event.EventService" />
</property>
</bean>
<bean class="org.apache.directory.server.core.configuration.MutableInterceptorConfiguration">
<property name="name" value="triggerService" />
<property name="interceptor">
<bean
class="org.apache.directory.server.core.trigger.TriggerService" />
</property>
</bean>
</list>
</property>
</bean>
<bean id="systemPartitionConfiguration"
class="org.apache.directory.server.core.partition.impl.btree.Mu
tableBTreePartitionConfiguration">
<property name="name" value="system" />
<property name="cacheSize" value="100" />
<property name="suffix" value="ou=system" />
<property name="optimizerEnabled" value="true" />
<property name="synchOnWrite" value="true" />
<property name="indexedAttributes">
<set>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.1" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.2" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.3" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.4" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.5" />
<property name="cacheSize" value="10" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.6" />
<property name="cacheSize" value="10" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.7" />
<property name="cacheSize" value="10" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="ou" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="uid" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="objectClass" />
<property name="cacheSize" value="100" />
</bean>
</set>
</property>
<property name="contextEntry">
<value>
objectClass: top
objectClass: organizationalUnit
objectClass: extensibleObject
ou: system
</value>
</property>
</bean>
<bean id="sevenSeasPartitionConfiguration"
class="org.apache.directory.server.core.partition.impl.btree
.MutableBTreePartitionConfiguration">
<property name="name" value="sevenseas" />
<property name="cacheSize" value="100" />
<property name="suffix" value="o=sevenSeas" />
<property name="optimizerEnabled" value="true" />
<property name="synchOnWrite" value="true" />
<property name="contextEntry">
<value>
objectClass: top
objectClass: domain
objectClass: extensibleObject
o: sevenSeas
</value>
</property>
</bean>
<bean id="openForcePartitionConfiguration"
class="org.apache.directory.server.core.partition.impl.btree
.MutableBTreePartitionConfiguration">
<property name="name" value="openforce" />
<property name="cacheSize" value="100" />
<property name="suffix" value="dc=openforce,dc=com" />
<property name="optimizerEnabled" value="true" />
<property name="synchOnWrite" value="true" />
<property name="contextEntry">
<value>
objectClass: top
objectClass: domain
objectClass: extensibleObject
dc: openforce
</value>
</property>
</bean>
<bean id="examplePartitionConfiguration"
class="org.apache.directory.server.core.partition.impl.btree.MutableBTreePartitionConfiguration">
<property name="name" value="example" />
<property name="cacheSize" value="100" />
<property name="suffix" value="dc=example,dc=com" />
<property name="optimizerEnabled" value="true" />
<property name="synchOnWrite" value="true" />
<property name="indexedAttributes">
<set>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.1" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.2" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.3" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.4" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.5" />
<property name="cacheSize" value="10" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.6" />
<property name="cacheSize" value="10" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="1.3.6.1.4.1.18060.0.4.1.2.7" />
<property name="cacheSize" value="10" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="dc" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="ou" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="krb5PrincipalName" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="uid" />
<property name="cacheSize" value="100" />
</bean>
<bean class="org.apache.directory.server.core.partition.impl.btree.MutableIndexConfiguration">
<property name="attributeId" value="objectClass" />
<property name="cacheSize" value="100" />
</bean>
</set>
</property>
<property name="contextEntry">
<value>
objectClass: top
objectClass: domain
objectClass: extensibleObject
dc: example
</value>
</property>
</bean>
<bean class="org.springframework.beans.factory.config.CustomEditorConfigurer">
<property name="customEditors">
<map>
<entry key="javax.naming.directory.Attributes">
<bean
class="org.apache.directory.server.core.configuration.AttributesPropertyEditor"/>
</entry>
</map>
</property>
</bean>
</beans>
--snap server.xml--
--
Martin Marcher
martin.marcher@gmail.com
http://www.mycorners.com
https://www.xing.com/profile/Martin_Marcher
http://www.linkedin.com/in/martinmarcher
http://www.studivz.net/profile.php?ids=9f83ea8c5996b8ec
http://www.amazon.de/gp/registry/wishlist/3KDAGCL2NKOIM/ref=reg_hu-wl_goto-registry/302-4432803-5146435?ie=UTF8&sort=date-added
Re: Alias Problem "failed on search operation: attributeType w/ OID
1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Emmanuel Lecharny <el...@apache.org>.
Martin Marcher a écrit :
> On 5/8/07, Emmanuel Lecharny <el...@apache.org> wrote:
>
>> You know what ? We would be very interested if you can write a simple
>> 'How to' which can be included into the doco. We have a few articles
>> (http://directory.apache.org/community%26resources/articles.html) which
>> describe ADS usage. We are interesting by some more !
>
>
> Good point (and a good time for that too),
>
> any guidelines for that how to write it?
>
> Our company is moving to a new location which will involve migrating
> different account systems to ldap and probably kerberos (hope to do
> that in apacheds too) that will involve a major redesign of the
> network too, which has grown in the last few month to a status that is
> annoying at best.
>
> All of this has to be finished until mid of june latest.
Whaoh ! One month to go ...
>
> Currently we are running an _old_ openLDAP for user logins, an old
> open-xchange setup (using another ldap) that some trainee set up,
> jabber server (with postgres backend) a few webapps with apache auth,
> a crm (http://xrms.sf.net) that can do ldap but uses mysql now. Mail
> with another postgres backend,.....
>
> Plan is to provide ldap logins (or generate the data from ldap if the
> app can't work with it, personally I'm using python although our
> developers do java). So this article could become a little longer.
>
> Usually I do the docs in latex but i'm in the process of switching to
> docbook (more or less) so that could be directly integrated into the
> apacheds site (if you want that).
DocBook could be great, but the best might be a PDF at this point. But
if you feel more confortable with LaTeX, we can switch to PDF from LaTeX
( Of course, it would be better if you can use Postcript fonts).
Even full text will be appreciated :)
Thanks a lot, and keep us informed !
Emmanuel
>
> martin
>
Re: Alias Problem "failed on search operation: attributeType w/ OID 1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Martin Marcher <ma...@gmail.com>.
On 5/8/07, Emmanuel Lecharny <el...@apache.org> wrote:
> You know what ? We would be very interested if you can write a simple
> 'How to' which can be included into the doco. We have a few articles
> (http://directory.apache.org/community%26resources/articles.html) which
> describe ADS usage. We are interesting by some more !
Good point (and a good time for that too),
any guidelines for that how to write it?
Our company is moving to a new location which will involve migrating
different account systems to ldap and probably kerberos (hope to do
that in apacheds too) that will involve a major redesign of the
network too, which has grown in the last few month to a status that is
annoying at best.
All of this has to be finished until mid of june latest.
Currently we are running an _old_ openLDAP for user logins, an old
open-xchange setup (using another ldap) that some trainee set up,
jabber server (with postgres backend) a few webapps with apache auth,
a crm (http://xrms.sf.net) that can do ldap but uses mysql now. Mail
with another postgres backend,.....
Plan is to provide ldap logins (or generate the data from ldap if the
app can't work with it, personally I'm using python although our
developers do java). So this article could become a little longer.
Usually I do the docs in latex but i'm in the process of switching to
docbook (more or less) so that could be directly integrated into the
apacheds site (if you want that).
martin
Re: Alias Problem "failed on search operation: attributeType w/ OID
1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Emmanuel Lecharny <el...@apache.org>.
Martin Marcher a écrit :
>> Can you fill a JIRA so that we remember to fix this problem ?
>
>
> already on it's way...just putting together all the info...
Thanks !!!
>
>>
>> Thanks for using ADS, and thanks a lot for being kind with us, when you
>> have spoiled hours trying to deal with Index ...
>
>
> hehe, i was just thinking "those poor guys/girls at apacheds have to
> deal with people like me, probably shooting myself in the foot and
> expect them to fix it".
>
> Don't worry I consider myself at best a junior level sysadmin with too
> little time and to much on the "to read" list. (Guess I'm not the only
> one on the planet with this problem).
You know what ? We would be very interested if you can write a simple
'How to' which can be included into the doco. We have a few articles
(http://directory.apache.org/community%26resources/articles.html) which
describe ADS usage. We are interesting by some more !
Thanks for your patience :)
Emmanuel
PS: we *love* our users : they find bugs, they have good ideas, and they
help us to improve the server !
Re: Alias Problem "failed on search operation: attributeType w/ OID 1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Martin Marcher <ma...@gmail.com>.
On 5/8/07, Emmanuel Lecharny <el...@apache.org> wrote:
> Martin Marcher a écrit :
> > Having to reload the data isn't much of a problem for me, our
> > directory is quite small and I guess reloading won't take long but all
> > of the entries not being accessible any more seems
> >
> > a) PEBCAK (which i suspect in the first place here) or
> > b) not good at all
> >
> Very true ... But we are currently working to ease the user feelings :
> the next version will store the full configuration into ADS itself, so
> we will be able to trigger a store procedure to create an index when
> added dynamically, using two of the cool features ADS offers : triggers
> and SP !
uh, oh all self contained, nice - now the only thing missing is
postgresql providing something to store authorization in ldap - ok
that truly is not your issue :)
> Can you fill a JIRA so that we remember to fix this problem ?
already on it's way...just putting together all the info...
>
> Thanks for using ADS, and thanks a lot for being kind with us, when you
> have spoiled hours trying to deal with Index ...
hehe, i was just thinking "those poor guys/girls at apacheds have to
deal with people like me, probably shooting myself in the foot and
expect them to fix it".
Don't worry I consider myself at best a junior level sysadmin with too
little time and to much on the "to read" list. (Guess I'm not the only
one on the planet with this problem).
I'm more glad to have an ldap server that finally "just runs" :)
cheers
martin
Re: Alias Problem "failed on search operation: attributeType w/ OID
1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Emmanuel Lecharny <el...@apache.org>.
Martin Marcher a écrit :
> Hi,
Hi !
>
> <snip/>
> Having to reload the data isn't much of a problem for me, our
> directory is quite small and I guess reloading won't take long but all
> of the entries not being accessible any more seems
>
> a) PEBCAK (which i suspect in the first place here) or
> b) not good at all
>
Very true ... But we are currently working to ease the user feelings :
the next version will store the full configuration into ADS itself, so
we will be able to trigger a store procedure to create an index when
added dynamically, using two of the cool features ADS offers : triggers
and SP !
Can you fill a JIRA so that we remember to fix this problem ?
Thanks for using ADS, and thanks a lot for being kind with us, when you
have spoiled hours trying to deal with Index ...
Emmanuel
Re: Alias Problem "failed on search operation: attributeType w/ OID 1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Martin Marcher <ma...@gmail.com>.
Hi,
On 5/8/07, Emmanuel Lecharny <el...@apache.org> wrote:
> > freshly installed apacheds 1.5, I started the server with
> > ./bin/server.init debug and the output stays empty upon searching with
> > the line below so i can't really provide more info - better don't know
> > how to provide more info. Using debian stable:
> >
> > I tried that search with the indexes from the
> > examplePartitionConfiguration and without them (first not having
> > indexes then adding them to the server.xml and restarting apacheds,
> > still no go). Now am I missing something big here or why is this
> > search not working?
>
> Well, I'm afraid you have to dump your base and laod it again. Index are
> created when adding entries, not when starting the server (AFAIK).
> <snip/>
More precise here is what I did:
open ldap studio connect to apacheds
load sevenseas sampledata
open server.xml file in an editor
copy the <property name="indexedAttributes"> stuff from
examplePartitionConfiguration to sevenSeasPartitionConfiguration (all
from the basic user guide so that is all data you have available)
(don't yet save it)
stop the server
save server.xml
start the server
try to find entries with ldapstudio (didn't close the connection!)
What also happened was that o=sevenseas didn't show any entries any
more. (sample data has been loaded before) - neither ldapstudio
(reloaded the schema, restarted eclipse - i'm using the 0.8 plugin)
nor ldapsearch from debians ldap-utils show anything.
I just tried that again
stop server
rm -rf var/partitions/sevenseas
start server again
same procedure as above (connect, load, etc, etc, add index entries to
the config file)
the data under o=sevenseas seems to be gone. But upon importing there
are 18 errors because all the data still exists. (logfile below).
I know it's not really nice not to shut down the connections but I can
imagine that this could happen in a real world scenario (restarting
the apacheds because of some config change or adding a partition,
whatever).
Having to reload the data isn't much of a problem for me, our
directory is quite small and I guess reloading won't take long but all
of the entries not being accessible any more seems
a) PEBCAK (which i suspect in the first place here) or
b) not good at all
--snip--
$ ldapsearch -h localhost -p 10389 -D "uid=admin,ou=system" -w secret
-b "o=sevenseas" -s sub -x -u "(objectclass=*)"
# extended LDIF
#
# LDAPv3
# base <o=sevenseas> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# search result
search: 2
result: 0 Success
# numResponses: 1
--snap--
> I also suggest that you fill a JIRA for this problem, because it could
> be interesting to create an index on the flay when the server is
> restarted, if the added index has just been created.
Will do so. Just asking here so that I know to some extent i didn't do
something totally stupid.
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.608
#!ERROR [LDAP: error code 68 - failed to add entry
ou=people,o=sevenSeas: 2.5.4.11=people,2.5.4.10=sevenseas already
exists!]
dn: ou=people,o=sevenSeas
objectclass: organizationalUnit
objectclass: top
description: Contains entries which describe persons (seamen)
ou: people
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.625
#!ERROR [LDAP: error code 68 - failed to add entry
ou=groups,o=sevenSeas: 2.5.4.11=groups,2.5.4.10=sevenseas already
exists!]
dn: ou=groups,o=sevenSeas
objectclass: organizationalUnit
objectclass: top
description: Contains entries which describe groups (crews, for instance)
ou: groups
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.640
#!ERROR [LDAP: error code 68 - failed to add entry
ou=crews,ou=groups,o=sevenSeas:
2.5.4.11=crews,2.5.4.11=groups,2.5.4.10=sevenseas already exists!]
dn: ou=crews,ou=groups,o=sevenSeas
objectclass: organizationalUnit
objectclass: top
description: Contains entries which describe ship crews
ou: crews
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.656
#!ERROR [LDAP: error code 68 - failed to add entry
ou=ranks,ou=groups,o=sevenSeas:
2.5.4.11=ranks,2.5.4.11=groups,2.5.4.10=sevenseas already exists!]
dn: ou=ranks,ou=groups,o=sevenSeas
objectclass: organizationalUnit
objectclass: top
description: Contains entries which describe naval ranks (e.g. captain)
ou: ranks
# HMS Lydia Crew
# --------------
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.675
#!ERROR [LDAP: error code 68 - failed to add entry cn=Horatio
Hornblower,ou=people,o=sevenSeas: 2.5.4.3=horatio
hornblower,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=Horatio Hornblower,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: Horatio Hornblower
description: Capt. Horatio Hornblower, R.N
givenname: Horatio
sn: Hornblower
uid: hhornblo
mail: hhornblo@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.698
#!ERROR [LDAP: error code 68 - failed to add entry cn=William
Bush,ou=people,o=sevenSeas: 2.5.4.3=william
bush,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=William Bush,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: William Bush
description: Lt. William Bush
givenname: William
manager: cn=Horatio Hornblower,ou=people,o=sevenSeas
sn: Bush
uid: wbush
mail: wbush@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.725
#!ERROR [LDAP: error code 68 - failed to add entry cn=Thomas
Quist,ou=people,o=sevenSeas: 2.5.4.3=thomas
quist,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=Thomas Quist,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: Thomas Quist
description: Seaman Quist
givenname: Thomas
manager: cn=Horatio Hornblower,ou=people,o=sevenSeas
sn: Quist
uid: tquist
mail: tquist@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.745
#!ERROR [LDAP: error code 68 - failed to add entry cn=Moultrie
Crystal,ou=people,o=sevenSeas: 2.5.4.3=moultrie
crystal,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=Moultrie Crystal,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: Moultrie Crystal
description: Lt. Crystal
givenname: Moultrie
manager: cn=Horatio Hornblower,ou=people,o=sevenSeas
sn: Crystal
uid: mchrysta
mail: mchrysta@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.764
#!ERROR [LDAP: error code 68 - failed to add entry cn=HMS
Lydia,ou=crews,ou=groups,o=sevenSeas: 2.5.4.3=hms
lydia,2.5.4.11=crews,2.5.4.11=groups,2.5.4.10=sevenseas already
exists!]
dn: cn=HMS Lydia,ou=crews,ou=groups,o=sevenSeas
objectclass: groupOfUniqueNames
objectclass: top
cn: HMS Lydia
uniquemember: cn=Horatio Hornblower,ou=people,o=sevenSeas
uniquemember: cn=William Bush,ou=people,o=sevenSeas
uniquemember: cn=Thomas Quist,ou=people,o=sevenSeas
uniquemember: cn=Moultrie Crystal,ou=people,o=sevenSeas
# HMS Victory Crew
# ----------------
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.785
#!ERROR [LDAP: error code 68 - failed to add entry cn=Horatio
Nelson,ou=people,o=sevenSeas: 2.5.4.3=horatio
nelson,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=Horatio Nelson,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: Horatio Nelson
description: Lord Horatio Nelson
givenname: Horatio
sn: Nelson
uid: hnelson
mail: hnelson@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.805
#!ERROR [LDAP: error code 68 - failed to add entry cn=Thomas Masterman
Hardy,ou=people,o=sevenSeas: 2.5.4.3=thomas masterman
hardy,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=Thomas Masterman Hardy,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: Thomas Masterman Hardy
description: Sir Thomas Masterman Hardy
givenname: Thomas
manager: cn=Horatio Nelson,ou=people,o=sevenSeas
sn: Hardy
uid: thardy
mail: thardy@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.828
#!ERROR [LDAP: error code 68 - failed to add entry cn=Cornelius
Buckley,ou=people,o=sevenSeas: 2.5.4.3=cornelius
buckley,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=Cornelius Buckley,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: Cornelius Buckley
description: LM Cornelius Buckley
givenname: Cornelius
manager: cn=Horatio Nelson,ou=people,o=sevenSeas
sn: Buckley
uid: cbuckley
mail: cbuckley@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.847
#!ERROR [LDAP: error code 68 - failed to add entry cn=HMS
Victory,ou=crews,ou=groups,o=sevenSeas: 2.5.4.3=hms
victory,2.5.4.11=crews,2.5.4.11=groups,2.5.4.10=sevenseas already
exists!]
dn: cn=HMS Victory,ou=crews,ou=groups,o=sevenSeas
objectclass: groupOfUniqueNames
objectclass: top
cn: HMS Victory
uniquemember: cn=Horatio Nelson,ou=people,o=sevenSeas
uniquemember: cn=Thomas Masterman Hardy,ou=people,o=sevenSeas
uniquemember: cn=Cornelius Buckley,ou=people,o=sevenSeas
# HMS Bounty Crew
# ---------------
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.871
#!ERROR [LDAP: error code 68 - failed to add entry cn=William
Bligh,ou=people,o=sevenSeas: 2.5.4.3=william
bligh,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=William Bligh,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: William Bligh
description: Captain William Bligh
givenname: William
sn: Bligh
uid: wbligh
mail: wbligh@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.902
#!ERROR [LDAP: error code 68 - failed to add entry cn=Fletcher
Christian,ou=people,o=sevenSeas: 2.5.4.3=fletcher
christian,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=Fletcher Christian,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: Fletcher Christian
description: Lieutenant Fletcher Christian
givenname: Fletcher
manager: cn=William Bligh,ou=people,o=sevenSeas
sn: Christian
uid: fchristi
mail: fchristi@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.934
#!ERROR [LDAP: error code 68 - failed to add entry cn=John
Fryer,ou=people,o=sevenSeas: 2.5.4.3=john
fryer,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=John Fryer,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: John Fryer
description: Master John Fryer
givenname: John
manager: cn=William Bligh,ou=people,o=sevenSeas
sn: Fryer
uid: jfryer
mail: jfryer@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.961
#!ERROR [LDAP: error code 68 - failed to add entry cn=John
Hallett,ou=people,o=sevenSeas: 2.5.4.3=john
hallett,2.5.4.11=people,2.5.4.10=sevenseas already exists!]
dn: cn=John Hallett,ou=people,o=sevenSeas
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
objectclass: top
cn: John Hallett
description: Midshipman John Hallett
givenname: John
manager: cn=William Bligh,ou=people,o=sevenSeas
sn: Hallett
uid: jhallett
mail: jhallett@royalnavy.mod.uk
userpassword: {SHA}nU4eI71bcnBGqeO0t9tXvY1u5oQ=
#!RESULT ERROR
#!CONNECTION ldap://10.200.2.10:10389
#!DATE 2007-05-08T19:43:01.986
#!ERROR [LDAP: error code 68 - failed to add entry cn=HMS
Bounty,ou=crews,ou=groups,o=sevenSeas: 2.5.4.3=hms
bounty,2.5.4.11=crews,2.5.4.11=groups,2.5.4.10=sevenseas already
exists!]
dn: cn=HMS Bounty,ou=crews,ou=groups,o=sevenSeas
objectclass: groupOfUniqueNames
objectclass: top
cn: HMS Bounty
uniquemember: cn=William Bligh,ou=people,o=sevenSeas
uniquemember: cn=Fletcher Christian,ou=people,o=sevenSeas
uniquemember: cn=John Fryer,ou=people,o=sevenSeas
uniquemember: cn=John Hallett,ou=people,o=sevenSeas
Re: Alias Problem "failed on search operation: attributeType w/ OID
1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Emmanuel Lecharny <el...@apache.org>.
Martin Marcher a écrit :
> Hello,
Hi !
>
> freshly installed apacheds 1.5, I started the server with
> ./bin/server.init debug and the output stays empty upon searching with
> the line below so i can't really provide more info - better don't know
> how to provide more info. Using debian stable:
>
> I tried that search with the indexes from the
> examplePartitionConfiguration and without them (first not having
> indexes then adding them to the server.xml and restarting apacheds,
> still no go). Now am I missing something big here or why is this
> search not working?
Well, I'm afraid you have to dump your base and laod it again. Index are
created when adding entries, not when starting the server (AFAIK).
<snip/>
I also suggest that you fill a JIRA for this problem, because it could
be interesting to create an index on the flay when the server is
restarted, if the added index has just been created.
Alex, do you confirm this behavior?
Emmanuel
Re: Alias Problem "failed on search operation: attributeType w/ OID 1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Martin Marcher <ma...@gmail.com>.
On 5/9/07, Alex Karasulu <ak...@apache.org> wrote:
> OK Thanks!
>
> BTW did you try what I recommended regarding adding the indices before
> adding the data?
nope sorry didn't get to that yet, I guess I can do that until monday.
For the time being i need to populate our directory (score yesterday:
me 1 : ldap 3 - score today me: 4 - ldap 6 -- catching up on this
beast) ldap itself is juuuuuuuuuussssst a bit more complex than i
thought, emmanuel provided me with a good link which helps getting the
basics right.
Re: Alias Problem "failed on search operation: attributeType w/ OID 1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Alex Karasulu <ak...@apache.org>.
OK Thanks!
BTW did you try what I recommended regarding adding the indices before
adding the data?
Alex
On 5/9/07, Martin Marcher <ma...@gmail.com> wrote:
>
> FYI:
>
> added 2 Jiras as I don't know if they are really related (the dn thing
> and the losing data after adding an index)
>
> JIRAs are:
>
> DIRSERVER-922 Data is "lost" after adding Index to config file
> DIRSERVER-923 result: 33 Alias problem
>
> hth
> martin
>
> On 5/9/07, Alex Karasulu <ak...@apache.org> wrote:
> > Hi,
> >
> > On 5/8/07, Martin Marcher <ma...@gmail.com> wrote:
> > >
> > > Hello,
> > >
> > > freshly installed apacheds 1.5, I started the server with
> > > ./bin/server.init debug and the output stays empty upon searching with
> > > the line below so i can't really provide more info - better don't know
> > > how to provide more info. Using debian stable:
> >
> >
> > Hmmm does the output say that logging is not enabled?
> >
> > I tried that search with the indexes from the
> > > examplePartitionConfiguration and without them (first not having
> > > indexes then adding them to the server.xml and restarting apacheds,
> > > still no go). Now am I missing something big here or why is this
> > > search not working?
> >
> >
> > Note that an index will need to be rebuilt if you added the index after
> > adding entries
> > to the server. Basically the reason for this is that index entries are
> > added during add
> > operations. If the index is not present while adding entries then added
> then
> > these
> > entries will not have index entries for the values that are indexed and
> > search results
> > will fail since the server relies on the index which is empty and does
> not
> > hit the master
> > table.
> >
> > You really need to make sure you add all the entries after creating the
> > index or use the
> > index building tool that comes with apacheds tools to populate a new
> index.
> >
> > snip ...
> >
> >
> > > $ ldapsearch -h localhost -p 10389 -D "uid=admin,ou=system" -w secret
> > > -b "ou=system" -s one -x "(uid=admin)" dn
> > > # extended LDIF
> > > #
> > > # LDAPv3
> > > # base <ou=system> with scope oneLevel
> > > # filter: (uid=admin)
> > > # requesting: dn
> > > #
> > >
> > > # search result
> > > search: 2
> > > result: 33 Alias problem
> > > text: failed on search operation: attributeType w/ OID
> > > 1.3.6.1.4.1.1466.115.1
> > > 21.1.12 not registered!
> > >
> > > # numResponses: 1
> >
> >
> > snip ...
> >
> > Hmmm this is odd because this OID corresponds to a syntax for the
> > distinguished name syntax and
> > not to an attributeType. I guess I need to reproduce your situation and
> see
> > if I can hunt this down.
> >
> > Alex
> >
>
>
> --
> Martin Marcher
> martin.marcher@gmail.com
> http://www.mycorners.com
> https://www.xing.com/profile/Martin_Marcher
> http://www.linkedin.com/in/martinmarcher
> http://www.studivz.net/profile.php?ids=9f83ea8c5996b8ec
>
> http://www.amazon.de/gp/registry/wishlist/3KDAGCL2NKOIM/ref=reg_hu-wl_goto-registry/302-4432803-5146435?ie=UTF8&sort=date-added
>
Re: Alias Problem "failed on search operation: attributeType w/ OID 1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Martin Marcher <ma...@gmail.com>.
FYI:
added 2 Jiras as I don't know if they are really related (the dn thing
and the losing data after adding an index)
JIRAs are:
DIRSERVER-922 Data is "lost" after adding Index to config file
DIRSERVER-923 result: 33 Alias problem
hth
martin
On 5/9/07, Alex Karasulu <ak...@apache.org> wrote:
> Hi,
>
> On 5/8/07, Martin Marcher <ma...@gmail.com> wrote:
> >
> > Hello,
> >
> > freshly installed apacheds 1.5, I started the server with
> > ./bin/server.init debug and the output stays empty upon searching with
> > the line below so i can't really provide more info - better don't know
> > how to provide more info. Using debian stable:
>
>
> Hmmm does the output say that logging is not enabled?
>
> I tried that search with the indexes from the
> > examplePartitionConfiguration and without them (first not having
> > indexes then adding them to the server.xml and restarting apacheds,
> > still no go). Now am I missing something big here or why is this
> > search not working?
>
>
> Note that an index will need to be rebuilt if you added the index after
> adding entries
> to the server. Basically the reason for this is that index entries are
> added during add
> operations. If the index is not present while adding entries then added then
> these
> entries will not have index entries for the values that are indexed and
> search results
> will fail since the server relies on the index which is empty and does not
> hit the master
> table.
>
> You really need to make sure you add all the entries after creating the
> index or use the
> index building tool that comes with apacheds tools to populate a new index.
>
> snip ...
>
>
> > $ ldapsearch -h localhost -p 10389 -D "uid=admin,ou=system" -w secret
> > -b "ou=system" -s one -x "(uid=admin)" dn
> > # extended LDIF
> > #
> > # LDAPv3
> > # base <ou=system> with scope oneLevel
> > # filter: (uid=admin)
> > # requesting: dn
> > #
> >
> > # search result
> > search: 2
> > result: 33 Alias problem
> > text: failed on search operation: attributeType w/ OID
> > 1.3.6.1.4.1.1466.115.1
> > 21.1.12 not registered!
> >
> > # numResponses: 1
>
>
> snip ...
>
> Hmmm this is odd because this OID corresponds to a syntax for the
> distinguished name syntax and
> not to an attributeType. I guess I need to reproduce your situation and see
> if I can hunt this down.
>
> Alex
>
--
Martin Marcher
martin.marcher@gmail.com
http://www.mycorners.com
https://www.xing.com/profile/Martin_Marcher
http://www.linkedin.com/in/martinmarcher
http://www.studivz.net/profile.php?ids=9f83ea8c5996b8ec
http://www.amazon.de/gp/registry/wishlist/3KDAGCL2NKOIM/ref=reg_hu-wl_goto-registry/302-4432803-5146435?ie=UTF8&sort=date-added
Re: Alias Problem "failed on search operation: attributeType w/ OID 1.3.6.1.4.1.1466.115.121.1.12 not registered!"
Posted by Alex Karasulu <ak...@apache.org>.
Hi,
On 5/8/07, Martin Marcher <ma...@gmail.com> wrote:
>
> Hello,
>
> freshly installed apacheds 1.5, I started the server with
> ./bin/server.init debug and the output stays empty upon searching with
> the line below so i can't really provide more info - better don't know
> how to provide more info. Using debian stable:
Hmmm does the output say that logging is not enabled?
I tried that search with the indexes from the
> examplePartitionConfiguration and without them (first not having
> indexes then adding them to the server.xml and restarting apacheds,
> still no go). Now am I missing something big here or why is this
> search not working?
Note that an index will need to be rebuilt if you added the index after
adding entries
to the server. Basically the reason for this is that index entries are
added during add
operations. If the index is not present while adding entries then added then
these
entries will not have index entries for the values that are indexed and
search results
will fail since the server relies on the index which is empty and does not
hit the master
table.
You really need to make sure you add all the entries after creating the
index or use the
index building tool that comes with apacheds tools to populate a new index.
snip ...
> $ ldapsearch -h localhost -p 10389 -D "uid=admin,ou=system" -w secret
> -b "ou=system" -s one -x "(uid=admin)" dn
> # extended LDIF
> #
> # LDAPv3
> # base <ou=system> with scope oneLevel
> # filter: (uid=admin)
> # requesting: dn
> #
>
> # search result
> search: 2
> result: 33 Alias problem
> text: failed on search operation: attributeType w/ OID
> 1.3.6.1.4.1.1466.115.1
> 21.1.12 not registered!
>
> # numResponses: 1
snip ...
Hmmm this is odd because this OID corresponds to a syntax for the
distinguished name syntax and
not to an attributeType. I guess I need to reproduce your situation and see
if I can hunt this down.
Alex