directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Thorsten Kampe (JIRA)" <>
Subject [jira] Created: (DIRSERVER-1380) Apache DS sending values in response to "no values" query
Date Mon, 13 Jul 2009 11:57:15 GMT
Apache DS sending values in response to "no values" query

                 Key: DIRSERVER-1380
             Project: Directory ApacheDS
          Issue Type: Bug
    Affects Versions: 1.5.4
         Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
            Reporter: Thorsten Kampe

Apache DS replies with values although I specifically request not to:

[1]>>> import ldap
[2]>>> connection = ldap.initialize('ldap://')
[3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
[3]    (97, [])
[4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE, 
filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
[('uid=admin,ou=system', {'cn': ['system administrator']}),
 ('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]

But in contrast OpenLDAP's ldapsearch -A works as expected:
BASE    ou=system
BINDDN  uid=admin,ou=system
URI     ldap://

thorsten@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
dn: uid=admin,ou=system

dn: cn=Administrators,ou=groups,ou=system

The same query works (does not return values) if I query an Active Directory or eDirectory

As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the Python-LDAP
mailing list and the developer's analysis says "it's an Apache DS bug". ("I did and watching
the LDAP traffic with Wireshark shows that ApacheDS returns the attribute values although
searchRequest::typesOnly is True
on the wire. In opposite to that OpenLDAP's slapd does not return any attribute values in
this case.")

Please read his full statement here:


This message is automatically generated by JIRA.
You can reply to this email to add a comment to the issue online.

View raw message