May 2009 - openldap-bugs

(ITS#6129) slapd seg faults on shut-down

by michael＠stroeder.com

Full_Name: Michael Ströder Version: RE24 OS: openSUSE Linux 11.1 URL: Submission from: (NULL) (84.163.72.172) gdb output: [New Thread 3953] Core was generated by `/opt/openldap-RE24/libexec/slapd -d 0 -h ldap://0.0.0.0:2072 -n slapd-ffg2009-2'. Program terminated with signal 11, Segmentation fault. #0 0xb799eef5 in free () from /lib/libc.so.6 (gdb) info threads 2 Thread 3953 0xffffe430 in __kernel_vsyscall () * 1 Thread 3951 0xb799eef5 in free () from /lib/libc.so.6 (gdb) thread apply all bt Thread 2 (Thread 3953): #0 0xffffe430 in __kernel_vsyscall () #1 0xb7ce37b9 in __lll_lock_wait () from /lib/libpthread.so.0 #2 0xb7cdece0 in _L_lock_286 () from /lib/libpthread.so.0 #3 0xb7cde705 in pthread_mutex_lock () from /lib/libpthread.so.0 #4 0xb7a387c9 in dl_iterate_phdr () from /lib/libc.so.6 #5 0xb7a3ada5 in _Unwind_Find_FDE () from /lib/libc.so.6 #6 0xb544764d in ?? () from /lib/libgcc_s.so.1 #7 0xb5447e88 in ?? () from /lib/libgcc_s.so.1 #8 0xb544818e in _Unwind_ForcedUnwind () from /lib/libgcc_s.so.1 #9 0xb7ce5aa6 in _Unwind_ForcedUnwind () from /lib/libpthread.so.0 #10 0xb7ce3491 in __pthread_unwind () from /lib/libpthread.so.0 #11 0xb7cdd5c0 in pthread_exit () from /lib/libpthread.so.0 #12 0xb7ed1593 in ldap_pvt_thread_exit (retval=0x0) at thr_posix.c:186 #13 0xb7ed0574 in ldap_int_thread_pool_wrapper (xpool=0x81d2fc8) at tpool.c:691 #14 0xb7cdd1b5 in start_thread () from /lib/libpthread.so.0 #15 0xb7a023be in clone () from /lib/libc.so.6 Thread 1 (Thread 3951): #0 0xb799eef5 in free () from /lib/libc.so.6 #1 0xb7ebad4d in ber_memfree_x (p=0x7fffffff, ctx=0x0) at memory.c:152 #2 0xb77af997 in ?? () from /usr/lib/libldap-2.4.so.2 #3 0xb7791a68 in ?? () from /usr/lib/libldap-2.4.so.2 #4 0xb77c0210 in _fini () from /usr/lib/libldap-2.4.so.2 #5 0xb7f28aff in ?? () from /lib/ld-linux.so.2 #6 0xb7f29447 in ?? () from /lib/ld-linux.so.2 #7 0xb7cb8cf4 in ?? () from /lib/libdl.so.2 #8 0xb7f239f6 in ?? () from /lib/ld-linux.so.2 #9 0xb7cb911c in ?? () from /lib/libdl.so.2 #10 0xb7cb8d2a in dlclose () from /lib/libdl.so.2 #11 0xb7ccf411 in _sasl_done_with_plugins () from /usr/lib/libsasl2.so.2 #12 0xb7cc7c90 in sasl_done () from /usr/lib/libsasl2.so.2 #13 0x080d9fb7 in slap_sasl_destroy () #14 0x080aed1b in slap_destroy () #15 0x08059fe2 in main () (gdb) bt full #0 0xb799eef5 in free () from /lib/libc.so.6 No symbol table info available. #1 0xb7ebad4d in ber_memfree_x (p=0x7fffffff, ctx=0x0) at memory.c:152 __PRETTY_FUNCTION__ = "ber_memfree_x" #2 0xb77af997 in ?? () from /usr/lib/libldap-2.4.so.2 No symbol table info available. #3 0xb7791a68 in ?? () from /usr/lib/libldap-2.4.so.2 No symbol table info available. #4 0xb77c0210 in _fini () from /usr/lib/libldap-2.4.so.2 No symbol table info available. #5 0xb7f28aff in ?? () from /lib/ld-linux.so.2 No symbol table info available. #6 0xb7f29447 in ?? () from /lib/ld-linux.so.2 No symbol table info available. #7 0xb7cb8cf4 in ?? () from /lib/libdl.so.2 No symbol table info available. #8 0xb7f239f6 in ?? () from /lib/ld-linux.so.2 No symbol table info available. #9 0xb7cb911c in ?? () from /lib/libdl.so.2 No symbol table info available. #10 0xb7cb8d2a in dlclose () from /lib/libdl.so.2 No symbol table info available. #11 0xb7ccf411 in _sasl_done_with_plugins () from /usr/lib/libsasl2.so.2 No symbol table info available. #12 0xb7cc7c90 in sasl_done () from /usr/lib/libsasl2.so.2 No symbol table info available. #13 0x080d9fb7 in slap_sasl_destroy () No symbol table info available. #14 0x080aed1b in slap_destroy () No symbol table info available. #15 0x08059fe2 in main () No symbol table info available.

14 years, 6 months

1
0
0 / 0

(ITS#6128) slapd pcache assert

by luca＠OpenLDAP.org

Full_Name: Luca Scamoni Version: RE24 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (82.63.140.131) Slapd configured as proxy with pcache hits assert and dumped core. Here the interesting log lines: May 15 12:55:11 ficus01 slapd[14753]: conn=42385 fd=60 ACCEPT from IP=213.205.2.82:38177 (IP=10.12.160.23:9011) May 15 12:55:11 ficus01 slapd[14753]: conn=42385 op=0 SRCH base="ou=Actalis CA per Firma Digitale Qualificata,o=CNIPA" scope=0 deref=0 filter="(objectClass=* )" [...] May 15 12:55:21 ficus01 slapd[14753]: connection_input: conn=42385 deferring operation: awaiting write May 15 12:55:21 ficus01 slapd[14753]: connection_operation: conn 42385 unknown LDAP request 0x70 May 15 12:55:22 ficus01 slapd[14753]: conn=42385 op=1 DISCONNECT tag=120 err=2 text=unknown LDAP request May 15 12:55:22 ficus01 slapd[14753]: send_search_entry: conn 42385 ber write failed. Note the 10 seconds gap between the lines. In the meantime 6 more identical request completed without problems. Here the backtrace: #0 0x006207a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2 No symbol table info available. #1 0x0022e7a5 in raise () from /lib/tls/libc.so.6 No symbol table info available. #2 0x00230209 in abort () from /lib/tls/libc.so.6 No symbol table info available. #3 0x00227d91 in __assert_fail () from /lib/tls/libc.so.6 No symbol table info available. #4 0x080782b8 in connection_destroy (c=0xb7f57638) at ../../../servers/slapd/connection.c:623 connid = 2397679448 close_reason = 0x816e740 "\210ã\026\bøtc" sb = (Sockbuf *) 0x816e740 sd = 158208128 __PRETTY_FUNCTION__ = "connection_destroy" #5 0x08078d29 in connection_close (c=0xb7f57638) at ../../../servers/slapd/connection.c:828 __PRETTY_FUNCTION__ = "connection_close" #6 0x0807af2e in connection_resched (conn=0xb7f57638) at ../../../servers/slapd/connection.c:1679 op = (Operation *) 0x9ace698 __PRETTY_FUNCTION__ = "connection_resched" #7 0x08079a97 in connection_operation (ctx=0x1e5e210, arg_v=0x8ee9ae80) at ../../../servers/slapd/connection.c:1160 rc = -1025 op = (Operation *) 0x8ee9ae80 rs = {sr_type = REP_EXTENDED, sr_tag = 120, sr_msgid = 0, sr_err = 2, sr_matched = 0x0, sr_text = 0x812a91f "unknown LDAP request", sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_sasl = {r_sasldata = 0x812cf25}, sru_extended = {r_rspoid = 0x812cf25 "1.3.6.1.4.1.1466.20036", r_rspdata = 0x0}, sru_search = {r_entry = 0x812cf25, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}}, sr_flags = 0} tag = 4294967295 opidx = SLAP_OP_LAST conn = (Connection *) 0xb7f57638 memctx = (void *) 0x0 memctx_null = (void *) 0x0 memsiz = 3086312752 __PRETTY_FUNCTION__ = "connection_operation" #8 0x00b84389 in ldap_int_thread_pool_wrapper (xpool=0x9705ab0) at ../../../libraries/libldap_r/tpool.c:663 pool = (struct ldap_int_thread_pool_s *) 0x9705ab0 task = (ldap_int_thread_task_t *) 0x99e6730 work_list = (ldap_int_tpool_plist_t *) 0x9705b30 ctx = {ltu_id = 31845280, ltu_key = {{ltk_key = 0x80793b5, ltk_data = 0x99c1308, ltk_free = 0x80791a5 <conn_counter_destroy>}, { ltk_key = 0x80e68c5, ltk_data = 0x99c13f8, ltk_free = 0x80e66d8 <slap_sl_mem_destroy>}, {ltk_key = 0x149f90, ltk_data = 0x99cae98, ltk_free = 0x141f67 <meta_back_candidates_keyfree>}, {ltk_key = 0x984d878, ltk_data = 0x99c7ed8, ltk_free = 0x94a4eb <bdb_reader_free>}, { ltk_key = 0x8092d23, ltk_data = 0x9933440, ltk_free = 0x8092c80 <slap_op_q_destroy>}, {ltk_key = 0x93a983, ltk_data = 0x8dd36008, ltk_free = 0x93a958 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 26 times>}} kctx = (ldap_int_thread_userctx_t *) 0x0 i = 32 keyslot = 273 hash = 6007057 __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper" #9 0x008893cc in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #10 0x002cfc3e in clone () from /lib/tls/libc.so.6 No symbol table info available. Any further info available

14 years, 6 months

1
0
0 / 0

Re: (ITS#6117) Segfault in hdb_index_mask

by luca.scamoni＠sys-net.it

quanah(a)zimbra.com ha scritto: > --On May 14, 2009 9:10:27 AM +0000 hyc(a)symas.com wrote: > >> Luca Scamoni wrote: >>> Howard Chu ha scritto: >>>> In frame 1 print *ap >>>> >>> p *ap >>> $1 = {a_desc = 0x0, a_vals = 0x0, a_nvals = 0x0, a_numvals = 0, a_flags >>> = 0, a_next = 0x54149adc} >> Your frame 1 is pretty much impossible - you have oldattrs == newattrs, >> but in frame 2 the attr list was replaced by a duplicate (using >> attrs_dup, modify.c:94). Perhaps you've got a compiler bug. > > Hm, do you build with compiler optimizations enabled? I build all of my > OpenLDAP builds with -O0 at this point, due to too many issues cropping up > when optimized builds were used. > No. Optimization is disabled in my builds too Ing. Luca Scamoni Responsabile Ricerca e Sviluppo SysNet s.r.l. Gruppo Partners Associates via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 0382 573859 (137) Fax: +39 0382 476497 Email: luca.scamoni(a)sys-net.it -----------------------------------

14 years, 6 months

1
0
0 / 0

Re: (ITS#6117) Segfault in hdb_index_mask

by quanah＠zimbra.com

--On May 14, 2009 9:10:27 AM +0000 hyc(a)symas.com wrote: > Luca Scamoni wrote: >> Howard Chu ha scritto: >>> >>> In frame 1 print *ap >>> >> p *ap >> $1 = {a_desc = 0x0, a_vals = 0x0, a_nvals = 0x0, a_numvals = 0, a_flags >> = 0, a_next = 0x54149adc} > > Your frame 1 is pretty much impossible - you have oldattrs == newattrs, > but in frame 2 the attr list was replaced by a duplicate (using > attrs_dup, modify.c:94). Perhaps you've got a compiler bug. Hm, do you build with compiler optimizations enabled? I build all of my OpenLDAP builds with -O0 at this point, due to too many issues cropping up when optimized builds were used. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

14 years, 6 months

1
0
0 / 0

(ITS#6127) sizelimit/timelimit ldap.conf(5) don't specify units

by quanah＠OpenLDAP.org

Full_Name: Quanah Gibson-Mount Version: 2.4 OS: NA URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (207.47.0.2) The descriptions for the sizelimit and timelimit directives don't specify the units in use, in contrast to the timeout directive. It's entirely possible new users may not know what those limits imply. For example, is the timelimit milliseconds? seconds? etc. Same with sizelimit -- Entries, kbs? >From Debian bug#528695. --Quanah

14 years, 6 months

1
0
0 / 0

Problems with slapd-meta

by sebastian.mattheis＠education-siemens.com

Hello OpenLDAP-Developers, configuring an meta-proxy i got 2 problems: The situation: I have a meta-proxy with a saslauthd that forwards the authentication-identities to meta-proxy. The meta-proxy resolves the uid to a dn and should look up the credentials in the targets. To do this the meta-proxy should authenticate to the target via sasl (idassert-bind with bindmethod sasl). 1. That works so far, but either the proxy authenticates with the binddn=cn and credential=secret of the idassert-bind directives using simple bind to look up the users credentials and forward all search requests only with this binddn-identity and not the users identity(this happens with mode=legacy) or the proxy only uses anonymous bind to look up the users entry for authentication (this happens with mode=self or mode=legacy flags=override). In no case the users identity is used to authenticate and authorize. The result is that the ACLs at the target dont matter for the user. I thought, okay no problem then I configure the proxy with the ACLs and let him authenticate at the target with what identity he wants. But now there is the 2nd problem. To the situation of problem 2: I have to implement a contact-directory for my student research project. In this directory every user shall have a contact-list with members. Only the user itself and the members of his individual contact-list should have access to the users data. I solved it in a test only on a slapd with bdb-backend by adding an entry with the objectclass groupOfNames and added a ACL with set.regex (You can see this in the config-files). In the test it works fine. 2. But the problem comes with the meta-proxy. I used the same ACLs to implement the mentioned user-contact-list-member-permission-feature but the slapd cant resolve the authenticating identity as member and cant grant the necessary permission i.e. read access to this identity despite it is added as a member in the groupOfNames. In the log-output i noticed, that the membership is ignored and the next rule-pattern is used (*) and only this permissions are granted (auth). Can you help me to fix this problem? Im sure I have some mistakes in the configurations. But where and what? In other case it would help to know that it is a bug and I can promise in my research project it would work if there isnt a bug. Thanks a lot Sebastian Mattheis Appending: The long long lists of configuration files and logfiles Proxy slapd.conf: # This is the main slapd configuration file. See slapd.conf(5) for more # info on the configuration options. ####################################################################### # Global Directives: # Features to permit #allow bind_v2 # Schema and objectClass definitions include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema # Where the pid file is put. The init.d script # will not stop the server if you change this. pidfile /var/run/slapd/slapd.pid # List of arguments that were passed to the server argsfile /var/run/slapd/slapd.args # Read slapd.conf(5) for possible values loglevel none logfile slapd.logfile # Where the dynamically loaded modules are stored modulepath /usr/lib/ldap #moduleload back_hdb #moduleload back_bdb moduleload back_monitor #moduleload syncprov moduleload back_ldap moduleload back_meta # The maximum number of entries that is returned for a search operation sizelimit 500 # The tool-threads parameter sets the actual amount of cpu's that is used # for indexing. tool-threads 1 # The server-ID must identify the server in one logical replication # domain as unique. (A ServerID should not be used in logical # replication-domain twice!) serverID 1 # In use the referral-directive refers to a server on a higher # hierarchical level or to a server on the same hierarchical # level in the DIT. (To refer to a server, that represents # subtree use a referral-entry in the DIT of this server. # For this you have to use the objectclass referral and # maybe in combination with the objectclass extensibleObject. #referral ldap://192.168.112.14 # Access Control Lists to verify Users and set access-rights # and permissions. #access to * # by dn="cn=datadmin,dc=gac" write # by anonymous auth # by * none #access to * # by self auth access to attrs=userPassword by dn.subtree="cn=datadmin,dc=gac" write by * auth access to attrs=cn by users read by * auth access to dn.regex="cn=([^,]*),o=([^,]*),dc=gac" attrs=gn,sn,l,mail,mobile by self read by set.regex="[cn=contacts,cn=$1,o=$2,dc=gac]/member" read by * auth access to dn.regex="cn=([^,]*),o=([^,]*),dc=gac" by users read by * auth access to dn.regex="cn=contacts,cn=([^,]*),o=([^,]*),dc=gac" by dn.regex="cn=$1,o=$2,dc=gac" write by set.regex="[cn=contacts,cn=$1,o=$2,dc=gac]/member" read by * none #access to dn.regex="cn=requests,cn=([^,]*),o=([^,]*),dc=gac" # by users write # by * none access to dn.sub="dc=gac" by users search access to * by dn.subtree="cn=datadmin,dc=gac" write by * auth ####################################################################### # Specific Backend Directives for "config": # Backend specific directives apply to this backend until another # 'backend' directive occurs database config rootdn "cn=config" rootpw "confpass" ####################################################################### # Specific Backend Directives for "monitor": # Backend specific directives apply to this backend until another # 'backend' directive occurs database monitor ####################################################################### # Specific Directives for database #1, of type hdb: # Database specific directives apply to this databasse until another # 'database' directive occurs database meta # The base of your directory in database #1 suffix "dc=gac" # rootdn directive for specifying a superuser on the database. This is needed # for syncrepl. rootdn "cn=datadmin,dc=gac" #rootpw "datadminpass" # The userPassword by default can be changed # by the entry owning it if they are authenticated. # Others should not be able to see it, except the # admin entry below # These access lines apply to database #1 only #access to attrs=userPassword,shadowLastChange # by dn="cn=datadmin,dc=gac" write # by anonymous auth # by * none # Ensure read access to the base for things like # supportedSASLMechanisms. Without this you may # have problems with SASL not knowing what # mechanisms are available and the like. # Note that this is covered by the 'access to *' # ACL below too but if you change that as people # are wont to do you'll still need this if you # want SASL (and possible other things) to work # happily. access to dn.base="" by * read # SASL Authentication authz-regexp uid=datadmin,cn=digest-md5,cn=auth cn=datadmin,dc=gac authz-regexp uid=([^,@]*)@([^,]*),cn=digest-md5,cn=auth cn=$1,o=$2,dc=gac # Following directives refer to the encapsulated LDAP-server holding # bdb's. The subtree-exclude directive specifies the subtree in the # base described by the URI closer. uri ldap://192.168.112.11/dc=gac acl-authcDN cn=datadmin,dc=gac acl-passwd datadminpass idassert-bind bindmethod=sasl binddn="cn=datadmin,dc=gac" credentials=datadminpass saslmech=digest-md5 # authzId=u:datadmin mode=legacy # flags=override #acl-bind # bindmethod=sasl # credentials=datadminpass # saslmech=digest-md5 # authcID=datadmin subtree-exclude o=fr,dc=gac #uri ldap://192.168.112.12/dc=gac #acl-authcDN cn=datadmin,dc=gac #acl-passwd datadminpass #subtree-exclude o=fr,dc=gac #uri ldap://192.168.112.13/o=fr,dc=gac #acl-authcDN cn=datadmin,dc=gac #acl-passwd datadminpass Target-slapd.conf # This is the main slapd configuration file. See slapd.conf(5) for more # info on the configuration options. ####################################################################### # Global Directives: # Features to permit #allow proxy_authz_anon # Schema and objectClass definitions include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema # Where the pid file is put. The init.d script # will not stop the server if you change this. pidfile /var/run/slapd/slapd.pid # List of arguments that were passed to the server argsfile /var/run/slapd/slapd.args # Read slapd.conf(5) for possible values loglevel none logfile /etc/ldap/slapd.logfile # Where the dynamically loaded modules are stored modulepath /usr/lib/ldap #moduleload back_hdb moduleload back_bdb moduleload back_monitor moduleload syncprov # The maximum number of entries that is returned for a search operation sizelimit 500 # The tool-threads parameter sets the actual amount of cpu's that is used # for indexing. tool-threads 1 # The server-ID must identify the server in one logical replication # domain as unique. (A ServerID should not be used in logical # replication-domain twice!) serverID 1 # In use the referral-directive refers to a server on a higher # hierarchical level or to a server on the same hierarchical # level in the DIT. (To refer to a server, that represents # subtree use a referral-entry in the DIT of this server. # For this you have to use the objectclass referral and # maybe in combination with the objectclass extensibleObject. #referral ldap://192.168.112.14 # Security settings to encrypt passwords and use a strong bind via # SASL authentication. #require SASL #password-hash {SSHA} # Allow LDAP-Proxy to authenticate users by their self identity. #authz-policy both ####################################################################### # Specific Backend Directives for "config": # Backend specific directives apply to this backend until another # 'backend' directive occurs database config rootdn "cn=config" rootpw "confpass" ####################################################################### # Specific Backend Directives for "monitor": # Backend specific directives apply to this backend until another # 'backend' directive occurs database monitor ####################################################################### # Specific Directives for database #1, of type bdb: # Database specific directives apply to this databasse until another # 'database' directive occurs database bdb # The base of your directory in database #1 suffix "dc=gac" # rootdn directive for specifying a superuser on the database. This is needed # for syncrepl. rootdn "cn=datadmin,dc=gac" rootpw "datadminpass" # Where the database file are physically stored for database #1 directory "/var/ldap/node1.gac" # The dbconfig settings are used to generate a DB_CONFIG file the first # time slapd starts. They do NOT override existing an existing DB_CONFIG # file. You should therefore change these settings in DB_CONFIG directly # or remove DB_CONFIG and restart slapd for changes to take effect. # For the Debian package we use 2MB as default but be sure to update this # value if you have plenty of RAM dbconfig set_cachesize 0 2097152 0 # Sven Hartge reported that he had to set this value incredibly high # to get slapd running at all. See http://bugs.debian.org/303057 for more # information. # Number of objects that can be locked at the same time. dbconfig set_lk_max_objects 1500 # Number of locks (both requested and granted) dbconfig set_lk_max_locks 1500 # Number of lockers dbconfig set_lk_max_lockers 1500 # Indexing options for database #1 index objectClass eq index entryCSN,entryUUID eq # Save the time that the entry gets modified, for database #1 lastmod on # Checkpoint the BerkeleyDB database periodically in case of system # failure and to speed slapd shutdown. checkpoint 512 30 # Where to store the replica logs for database #1 # replogfile /var/lib/ldap/replog # The userPassword by default can be changed # by the entry owning it if they are authenticated. # Others should not be able to see it, except the # admin entry below # These access lines apply to database #1 only #access to attrs=userPassword,shadowLastChange # by dn="cn=datadmin,dc=gac" write # by anonymous auth # by * none # Ensure read access to the base for things like # supportedSASLMechanisms. Without this you may # have problems with SASL not knowing what # mechanisms are available and the like. # Note that this is covered by the 'access to *' # ACL below too but if you change that as people # are wont to do you'll still need this if you # want SASL (and possible other things) to work # happily. access to dn.base="" by * read #SASL Authentication authz-regexp uid=datadmin,cn=([^,]*),cn=auth cn=datadmin,dc=gac authz-regexp uid=root,cn=([^,]*),cn=auth cn=datadmin,dc=gac authz-regexp uid=([^,]*),cn=digest-md5,cn=auth cn=$1,o=de,dc=gac # Access Control Lists to verify Users and set access # and permissions. #access to * # by dn.sub="cn=datadmin,dc=gac" write # by * read access to attrs=userPassword by dn.subtree="cn=datadmin,dc=gac" write by * search by * auth access to attrs=cn by users read by * search by * auth access to dn.regex="cn=([^,]*),o=([^,]*),dc=gac" attrs=gn,sn,l,mail,mobile by self read by set.regex="[cn=contacts,cn=$1,o=$2,dc=gac]/member" read by * search by * auth access to dn.regex="cn=([^,]*),o=([^,]*),dc=gac" by users read by * search by * auth access to dn.regex="cn=contacts,cn=([^,]*),o=([^,]*),dc=gac" by dn.regex="cn=$1,o=$2,dc=gac" write by set.regex="[cn=contacts,cn=$1,o=$2,dc=gac]/member" read by * none #access to dn.regex="cn=requests,cn=([^,]*),o=([^,]*),dc=gac" # by users write # by * none access to dn.sub="dc=gac" by users search access to * by dn.subtree="cn=datadmin,dc=gac" write by * search by * auth # For Netscape Roaming support, each user gets a roaming # profile for which they have write access to #access to dn=".*,ou=Roaming,o=morsnet" # by dn="cn=admin,dc=gac" write # by dnattr=owner write # Directives for Mulit-Master-SyncReplication #syncrepl rid=01 # provider="ldap://192.168.112.12" # sizelimit=unlimited # binddn="cn=datadmin,dc=gac" # credentials=datadminpass # bindmethod=simple # searchbase="dc=gac" # schemachecking=off # type=refreshAndPersist # retry="10 +" # scope=sub # filter="(objectclass=*)" # attrs="*" #mirrormode on #overlay syncprov #syncprov-checkpoint 100 10 #syncprov-sessionlog 100 ####################################################################### # Specific Directives for database #2, of type 'other' (can be hdb too): # Database specific directives apply to this databasse until another # 'database' directive occurs #database <other> # The base of your directory for database #2 #suffix "dc=gac" Proxy-Log daemon: activity on: slap_listener_activate(8): >>> slap_listener(ldap:///) daemon: listen=8, new connection on 11 daemon: added 11r (active) listener=(nil) conn=3 fd=11 ACCEPT from IP=192.168.112.12:42372 (IP=0.0.0.0:389) daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL daemon: activity on 1 descriptor daemon: activity on: 11r daemon: read active on 11 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(11) connection_get(11): got connid=3 connection_read(11): checking for input on id=3 ber_get_next ldap_read: want=8, got=8 0000: 30 18 02 01 01 60 13 02 0....`.. ldap_read: want=18, got=18 0000: 01 03 04 00 a3 0c 04 0a 44 49 47 45 53 54 2d 4d ........DIGEST-M 0010: 44 35 D5 ber_get_next: tag 0x30 len 24 contents: ber_dump: buf=0x88ede60 ptr=0x88ede60 end=0x88ede78 len=24 0000: 02 01 01 60 13 02 01 03 04 00 a3 0c 04 0a 44 49 ...`..........DI 0010: 47 45 53 54 2d 4d 44 35 GEST-MD5 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable conn=3 op=0 do_bind ber_scanf fmt ({imt) ber: ber_dump: buf=0x88ede60 ptr=0x88ede63 end=0x88ede78 len=21 0000: 60 13 02 01 03 04 00 a3 0c 04 0a 44 49 47 45 53 `..........DIGES 0010: 54 2d 4d 44 35 T-MD5 ber_scanf fmt ({m) ber: ber_dump: buf=0x88ede60 ptr=0x88ede6a end=0x88ede78 len=14 0000: 00 0c 04 0a 44 49 47 45 53 54 2d 4d 44 35 ....DIGEST-MD5 ber_scanf fmt (}}) ber: ber_dump: buf=0x88ede60 ptr=0x88ede78 end=0x88ede78 len=0 >>> dnPrettyNormal: <> <<< dnPrettyNormal: <>, <> conn=3 op=0 BIND dn="" method=163 do_bind: dn () SASL mech DIGEST-MD5 ==> sasl_bind: dn="" mech=DIGEST-MD5 datalen=0 SASL [conn=3] Debug: DIGEST-MD5 server step 1 send_ldap_sasl: err=14 len=181 send_ldap_response: msgid=1 tag=97 err=14 ber_flush2: 228 bytes to sd 11 0000: 30 81 e1 02 01 01 61 81 db 0a 01 0e 04 00 04 1c 0.....a......... 0010: 53 41 53 4c 28 30 29 3a 20 73 75 63 63 65 73 73 SASL(0): success 0020: 66 75 6c 20 72 65 73 75 6c 74 3a 20 87 81 b5 6e ful result: ...n 0030: 6f 6e 63 65 3d 22 52 47 42 34 2f 6e 6a 7a 43 4b once="RGB4/njzCK 0040: 65 42 59 38 62 36 35 69 77 48 70 47 77 64 6e 37 eBY8b65iwHpGwdn7 0050: 64 4b 31 34 55 77 6f 5a 6a 62 6f 49 7a 70 5a 4d dK14UwoZjboIzpZM 0060: 45 3d 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e E=",realm="node. 0070: 67 61 63 22 2c 71 6f 70 3d 22 61 75 74 68 2c 61 gac",qop="auth,a 0080: 75 74 68 2d 69 6e 74 2c 61 75 74 68 2d 63 6f 6e uth-int,auth-con 0090: 66 22 2c 63 69 70 68 65 72 3d 22 72 63 34 2d 34 f",cipher="rc4-4 00a0: 30 2c 72 63 34 2d 35 36 2c 72 63 34 2c 64 65 73 0,rc4-56,rc4,des 00b0: 2c 33 64 65 73 22 2c 6d 61 78 62 75 66 3d 36 35 ,3des",maxbuf=65 00c0: 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 66 2d 536,charset=utf- 00d0: 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 8,algorithm=md5- 00e0: 73 65 73 73 sess ldap_write: want=228, written=228 0000: 30 81 e1 02 01 01 61 81 db 0a 01 0e 04 00 04 1c 0.....a......... 0010: 53 41 53 4c 28 30 29 3a 20 73 75 63 63 65 73 73 SASL(0): success 0020: 66 75 6c 20 72 65 73 75 6c 74 3a 20 87 81 b5 6e ful result: ...n 0030: 6f 6e 63 65 3d 22 52 47 42 34 2f 6e 6a 7a 43 4b once="RGB4/njzCK 0040: 65 42 59 38 62 36 35 69 77 48 70 47 77 64 6e 37 eBY8b65iwHpGwdn7 0050: 64 4b 31 34 55 77 6f 5a 6a 62 6f 49 7a 70 5a 4d dK14UwoZjboIzpZM 0060: 45 3d 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e E=",realm="node. 0070: 67 61 63 22 2c 71 6f 70 3d 22 61 75 74 68 2c 61 gac",qop="auth,a 0080: 75 74 68 2d 69 6e 74 2c 61 75 74 68 2d 63 6f 6e uth-int,auth-con 0090: 66 22 2c 63 69 70 68 65 72 3d 22 72 63 34 2d 34 f",cipher="rc4-4 00a0: 30 2c 72 63 34 2d 35 36 2c 72 63 34 2c 64 65 73 0,rc4-56,rc4,des 00b0: 2c 33 64 65 73 22 2c 6d 61 78 62 75 66 3d 36 35 ,3des",maxbuf=65 00c0: 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 66 2d 536,charset=utf- 00d0: 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 8,algorithm=md5- daemon: activity on 1 descriptor 00e0: 73 65 73 73 sess conn=3 op=0 RESULT tag=97 err=14 text=SASL(0): successful result: <== slap_sasl_bind: rc=14 daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL daemon: activity on 1 descriptor daemon: activity on: 11r daemon: read active on 11 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(11) connection_get(11): got connid=3 connection_read(11): checking for input on id=3 ber_get_next ldap_read: want=8, got=8 0000: 30 82 01 29 02 01 02 60 0..)...` ldap_read: want=293, got=293 0000: 82 01 22 02 01 03 04 00 a3 82 01 19 04 0a 44 49 .."...........DI 0010: 47 45 53 54 2d 4d 44 35 04 82 01 09 75 73 65 72 GEST-MD5....user 0020: 6e 61 6d 65 3d 22 75 73 65 72 32 40 64 65 22 2c name="user2@de", 0030: 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 realm="node.gac" 0040: 2c 6e 6f 6e 63 65 3d 22 52 47 42 34 2f 6e 6a 7a ,nonce="RGB4/njz 0050: 43 4b 65 42 59 38 62 36 35 69 77 48 70 47 77 64 CKeBY8b65iwHpGwd 0060: 6e 37 64 4b 31 34 55 77 6f 5a 6a 62 6f 49 7a 70 n7dK14UwoZjboIzp 0070: 5a 4d 45 3d 22 2c 63 6e 6f 6e 63 65 3d 22 7a 32 ZME=",cnonce="z2 0080: 69 6c 2f 6c 32 61 39 77 72 47 73 7a 2b 6b 32 2b il/l2a9wrGsz+k2+ 0090: 59 67 6d 56 46 39 55 4d 72 5a 55 6a 59 6a 70 54 YgmVF9UMrZUjYjpT 00a0: 62 54 56 5a 6f 68 7a 45 67 3d 22 2c 6e 63 3d 30 bTVZohzEg=",nc=0 00b0: 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 68 0000001,qop=auth 00c0: 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 34 -conf,cipher=rc4 00d0: 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 35 ,maxbuf=16777215 00e0: 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 61 ,digest-uri="lda 00f0: 70 2f 6e 6f 64 65 2e 67 61 63 22 2c 72 65 73 70 p/node.gac",resp 0100: 6f 6e 73 65 3d 38 33 35 62 65 33 64 32 62 65 66 onse=835be3d2bef 0110: 30 31 32 34 35 62 66 66 61 33 35 66 30 64 39 39 01245bffa35f0d99 0120: 64 66 32 62 34 df2b4 ber_get_next: tag 0x30 len 297 contents: ber_dump: buf=0x89233e8 ptr=0x89233e8 end=0x8923511 len=297 0000: 02 01 02 60 82 01 22 02 01 03 04 00 a3 82 01 19 ...`.."......... 0010: 04 0a 44 49 47 45 53 54 2d 4d 44 35 04 82 01 09 ..DIGEST-MD5.... 0020: 75 73 65 72 6e 61 6d 65 3d 22 75 73 65 72 32 40 username="user2@ 0030: 64 65 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e de",realm="node. 0040: 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 52 47 42 34 gac",nonce="RGB4 0050: 2f 6e 6a 7a 43 4b 65 42 59 38 62 36 35 69 77 48 /njzCKeBY8b65iwH 0060: 70 47 77 64 6e 37 64 4b 31 34 55 77 6f 5a 6a 62 pGwdn7dK14UwoZjb 0070: 6f 49 7a 70 5a 4d 45 3d 22 2c 63 6e 6f 6e 63 65 oIzpZME=",cnonce 0080: 3d 22 7a 32 69 6c 2f 6c 32 61 39 77 72 47 73 7a ="z2il/l2a9wrGsz 0090: 2b 6b 32 2b 59 67 6d 56 46 39 55 4d 72 5a 55 6a +k2+YgmVF9UMrZUj 00a0: 59 6a 70 54 62 54 56 5a 6f 68 7a 45 67 3d 22 2c YjpTbTVZohzEg=", 00b0: 6e 63 3d 30 30 30 30 30 30 30 31 2c 71 6f 70 3d nc=00000001,qop= 00c0: 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 auth-conf,cipher 00d0: 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 =rc4,maxbuf=1677 00e0: 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 7215,digest-uri= 00f0: 22 6c 64 61 70 2f 6e 6f 64 65 2e 67 61 63 22 2c "ldap/node.gac", 0100: 72 65 73 70 6f 6e 73 65 3d 38 33 35 62 65 33 64 response=835be3d 0110: 32 62 65 66 30 31 32 34 35 62 66 66 61 33 35 66 2bef01245bffa35f 0120: 30 64 39 39 64 66 32 62 34 0d99df2b4 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable conn=3 op=1 do_bind ber_scanf fmt ({imt) ber: ber_dump: buf=0x89233e8 ptr=0x89233eb end=0x8923511 len=294 daemon: activity on 1 descriptor 0000: 60 82 01 22 02 01 03 04 00 a3 82 01 19 04 0a 44 `.."...........D 0010: 49 47 45 53 54 2d 4d 44 35 04 82 01 09 75 73 65 IGEST-MD5....use 0020: 72 6e 61 6d 65 3d 22 75 73 65 72 32 40 64 65 22 rname="user2@de" 0030: 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 ,realm="node.gac 0040: 22 2c 6e 6f 6e 63 65 3d 22 52 47 42 34 2f 6e 6a ",nonce="RGB4/nj 0050: 7a 43 4b 65 42 59 38 62 36 35 69 77 48 70 47 77 zCKeBY8b65iwHpGw 0060: 64 6e 37 64 4b 31 34 55 77 6f 5a 6a 62 6f 49 7a dn7dK14UwoZjboIz 0070: 70 5a 4d 45 3d 22 2c 63 6e 6f 6e 63 65 3d 22 7a pZME=",cnonce="z 0080: 32 69 6c 2f 6c 32 61 39 77 72 47 73 7a 2b 6b 32 2il/l2a9wrGsz+k2 0090: 2b 59 67 6d 56 46 39 55 4d 72 5a 55 6a 59 6a 70 +YgmVF9UMrZUjYjp 00a0: 54 62 54 56 5a 6f 68 7a 45 67 3d 22 2c 6e 63 3d TbTVZohzEg=",nc= 00b0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut 00c0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc 00d0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721 00e0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld 00f0: 61 70 2f 6e 6f 64 65 2e 67 61 63 22 2c 72 65 73 ap/node.gac",res 0100: 70 6f 6e 73 65 3d 38 33 35 62 65 33 64 32 62 65 ponse=835be3d2be 0110: 66 30 31 32 34 35 62 66 66 61 33 35 66 30 64 39 f01245bffa35f0d9 0120: 39 64 66 32 62 34 9df2b4 ber_scanf fmt ({m) ber: ber_dump: buf=0x89233e8 ptr=0x89233f4 end=0x8923511 len=285 0000: 00 82 01 19 04 0a 44 49 47 45 53 54 2d 4d 44 35 ......DIGEST-MD5 0010: 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 75 73 ....username="us 0020: 65 72 32 40 64 65 22 2c 72 65 61 6c 6d 3d 22 6e er2@de",realm="n 0030: 6f 64 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 ode.gac",nonce=" 0040: 52 47 42 34 2f 6e 6a 7a 43 4b 65 42 59 38 62 36 RGB4/njzCKeBY8b6 0050: 35 69 77 48 70 47 77 64 6e 37 64 4b 31 34 55 77 5iwHpGwdn7dK14Uw 0060: 6f 5a 6a 62 6f 49 7a 70 5a 4d 45 3d 22 2c 63 6e oZjboIzpZME=",cn 0070: 6f 6e 63 65 3d 22 7a 32 69 6c 2f 6c 32 61 39 77 once="z2il/l2a9w 0080: 72 47 73 7a 2b 6b 32 2b 59 67 6d 56 46 39 55 4d rGsz+k2+YgmVF9UM 0090: 72 5a 55 6a 59 6a 70 54 62 54 56 5a 6f 68 7a 45 rZUjYjpTbTVZohzE 00a0: 67 3d 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c g=",nc=00000001, 00b0: 71 6f 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 qop=auth-conf,ci 00c0: 70 68 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d pher=rc4,maxbuf= 00d0: 31 36 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 16777215,digest- 00e0: 75 72 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2e 67 uri="ldap/node.g 00f0: 61 63 22 2c 72 65 73 70 6f 6e 73 65 3d 38 33 35 ac",response=835 0100: 62 65 33 64 32 62 65 66 30 31 32 34 35 62 66 66 be3d2bef01245bff 0110: 61 33 35 66 30 64 39 39 64 66 32 62 34 a35f0d99df2b4 ber_scanf fmt (m) ber: ber_dump: buf=0x89233e8 ptr=0x8923404 end=0x8923511 len=269 0000: 00 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 75 73 ....username="us 0010: 65 72 32 40 64 65 22 2c 72 65 61 6c 6d 3d 22 6e er2@de",realm="n 0020: 6f 64 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 ode.gac",nonce=" 0030: 52 47 42 34 2f 6e 6a 7a 43 4b 65 42 59 38 62 36 RGB4/njzCKeBY8b6 0040: 35 69 77 48 70 47 77 64 6e 37 64 4b 31 34 55 77 5iwHpGwdn7dK14Uw 0050: 6f 5a 6a 62 6f 49 7a 70 5a 4d 45 3d 22 2c 63 6e oZjboIzpZME=",cn 0060: 6f 6e 63 65 3d 22 7a 32 69 6c 2f 6c 32 61 39 77 once="z2il/l2a9w 0070: 72 47 73 7a 2b 6b 32 2b 59 67 6d 56 46 39 55 4d rGsz+k2+YgmVF9UM 0080: 72 5a 55 6a 59 6a 70 54 62 54 56 5a 6f 68 7a 45 rZUjYjpTbTVZohzE 0090: 67 3d 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c g=",nc=00000001, 00a0: 71 6f 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 qop=auth-conf,ci 00b0: 70 68 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d pher=rc4,maxbuf= 00c0: 31 36 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 16777215,digest- 00d0: 75 72 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2e 67 uri="ldap/node.g 00e0: 61 63 22 2c 72 65 73 70 6f 6e 73 65 3d 38 33 35 ac",response=835 00f0: 62 65 33 64 32 62 65 66 30 31 32 34 35 62 66 66 be3d2bef01245bff 0100: 61 33 35 66 30 64 39 39 64 66 32 62 34 a35f0d99df2b4 ber_scanf fmt (}}) ber: ber_dump: buf=0x89233e8 ptr=0x8923511 end=0x8923511 len=0 >>> dnPrettyNormal: <> <<< dnPrettyNormal: <>, <> conn=3 op=1 BIND dn="" method=163 do_bind: dn () SASL mech DIGEST-MD5 ==> sasl_bind: dn="" mech=<continuing> datalen=265 SASL [conn=3] Debug: DIGEST-MD5 server step 2 SASL Canonicalize [conn=3]: authcid="user2@de" slap_sasl_getdn: conn 3 id=user2@de [len=8] => ldap_dn2bv(16) <= ldap_dn2bv(uid=user2@de,cn=DIGEST-MD5,cn=auth)=0 slap_sasl_getdn: u:id converted to uid=user2@de,cn=DIGEST-MD5,cn=auth >>> dnNormalize: <uid=user2@de,cn=DIGEST-MD5,cn=auth> => ldap_bv2dn(uid=user2@de,cn=DIGEST-MD5,cn=auth,0) <= ldap_bv2dn(uid=user2@de,cn=DIGEST-MD5,cn=auth)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=user2@de,cn=digest-md5,cn=auth)=0 <<< dnNormalize: <uid=user2@de,cn=digest-md5,cn=auth> ==>slap_sasl2dn: converting SASL name uid=user2@de,cn=digest-md5,cn=auth to a DN ==> rewrite_context_apply [depth=1] string='uid=user2@de,cn=digest-md5,cn=auth' ==> rewrite_rule_apply rule='uid=datadmin,cn=digest-md5,cn=auth' string='uid=user2@de,cn=digest-md5,cn=auth' [1 pass(es)] ==> rewrite_rule_apply rule='uid=([^,@]*)@([^,]*),cn=digest-md5,cn=auth' string='uid=user2@de,cn=digest-md5,cn=auth' [1 pass(es)] ==> rewrite_context_apply [depth=1] res={0,'cn=user2,o=de,dc=gac'} [rw] authid: "uid=user2@de,cn=digest-md5,cn=auth" -> "cn=user2,o=de,dc=gac" slap_parseURI: parsing cn=user2,o=de,dc=gac ldap_url_parse_ext(cn=user2,o=de,dc=gac) >>> dnNormalize: <cn=user2,o=de,dc=gac> => ldap_bv2dn(cn=user2,o=de,dc=gac,0) <= ldap_bv2dn(cn=user2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnNormalize: <cn=user2,o=de,dc=gac> <==slap_sasl2dn: Converted SASL name to cn=user2,o=de,dc=gac slap_sasl_getdn: dn:id converted to cn=user2,o=de,dc=gac SASL Canonicalize [conn=3]: slapAuthcDN="cn=user2,o=de,dc=gac" conn=3 op=1: meta_back_getconn[0] conn=3 op=1 meta_back_getconn: candidates=1 conn=-1 fetched conn=3 op=1 >>> meta_back_search_start[0] conn=3 op=1 >>> meta_search_dobind_init[0] conn=3 op=1 <<< meta_search_dobind_init[0]=1 [rw] searchBase: "cn=user2,o=de,dc=gac" -> "cn=user2,o=de,dc=gac" [rw] searchFilter: "(objectClass=*)" -> "(objectClass=*)" ldap_search_ext put_filter: "(objectClass=*)" put_filter: simple put_simple_filter: "objectClass=*" ldap_build_search_req ATTRS: * ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x8924c28 ptr=0x8924c28 end=0x8924c63 len=59 0000: 30 39 02 01 05 63 34 04 14 63 6e 3d 75 73 65 72 09...c4..cn=user 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 0a 01 00 2,o=de,dc=gac... 0020: 0a 01 00 02 01 01 02 01 00 01 01 00 87 0b 6f 62 ..............ob 0030: 6a 65 63 74 43 6c 61 73 73 30 00 jectClass0. ber_scanf fmt ({) ber: ber_dump: buf=0x8924c28 ptr=0x8924c2d end=0x8924c63 len=54 0000: 63 34 04 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 c4..cn=user2,o=d 0010: 65 2c 64 63 3d 67 61 63 0a 01 00 0a 01 00 02 01 e,dc=gac........ 0020: 01 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 43 .........objectC 0030: 6c 61 73 73 30 00 lass0. ber_flush2: 59 bytes to sd 12 0000: 30 39 02 01 05 63 34 04 14 63 6e 3d 75 73 65 72 09...c4..cn=user 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 0a 01 00 2,o=de,dc=gac... 0020: 0a 01 00 02 01 01 02 01 00 01 01 00 87 0b 6f 62 ..............ob 0030: 6a 65 63 74 43 6c 61 73 73 30 00 jectClass0. ldap_write: want=59, written=59 0000: 30 39 02 01 05 63 34 04 14 63 6e 3d 75 73 65 72 09...c4..cn=user 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 0a 01 00 2,o=de,dc=gac... 0020: 0a 01 00 02 01 01 02 01 00 01 01 00 87 0b 6f 62 ..............ob 0030: 6a 65 63 74 43 6c 61 73 73 30 00 jectClass0. conn=3 op=1 <<< meta_back_search_start[0]=1 conn=3 op=1 meta_back_search: ncandidates=1 cnd="*" ldap_result ld 0x8900620 msgid 5 wait4msg ld 0x8900620 msgid 5 (timeout 0 usec) wait4msg continue ld 0x8900620 msgid 5 all 2 ** ld 0x8900620 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:23 2009 ** ld 0x8900620 Outstanding Requests: * msgid 5, origid 5, status InProgress outstanding referrals 0, parent count 0 ld 0x8900620 request count 1 (abandoned 0) ** ld 0x8900620 Response Queue: Empty ld 0x8900620 response count 0 ldap_chkResponseList ld 0x8900620 msgid 5 all 2 ldap_chkResponseList returns ld 0x8900620 NULL ldap_int_select daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL ldap_result ld 0x8900620 msgid 5 wait4msg ld 0x8900620 msgid 5 (timeout 100000 usec) wait4msg continue ld 0x8900620 msgid 5 all 2 ** ld 0x8900620 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:23 2009 ** ld 0x8900620 Outstanding Requests: * msgid 5, origid 5, status InProgress outstanding referrals 0, parent count 0 ld 0x8900620 request count 1 (abandoned 0) ** ld 0x8900620 Response Queue: Empty ld 0x8900620 response count 0 ldap_chkResponseList ld 0x8900620 msgid 5 all 2 ldap_chkResponseList returns ld 0x8900620 NULL ldap_int_select read1msg: ld 0x8900620 msgid 5 all 2 ber_get_next ldap_read: want=8, got=8 0000: 30 81 8a 02 01 05 64 81 0.....d. ldap_read: want=133, got=133 0000: 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d 64 65 ...cn=User2,o=de 0010: 2c 64 63 3d 67 61 63 30 6c 30 1e 04 0b 6f 62 6a ,dc=gac0l0...obj 0020: 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e 65 74 ectClass1...inet 0030: 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 6e 31 OrgPerson0...cn1 0040: 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e 31 07 ...User20...sn1. 0050: 04 05 55 73 65 72 32 30 14 04 09 67 69 76 65 6e ..User20...given 0060: 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 16 04 Name1...User20.. 0070: 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 .userPassword1.. 0080: 04 70 61 73 73 .pass ber_get_next: tag 0x30 len 138 contents: ber_dump: buf=0x89000f8 ptr=0x89000f8 end=0x8900182 len=138 0000: 02 01 05 64 81 84 04 14 63 6e 3d 55 73 65 72 32 ...d....cn=User2 0010: 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 6c 30 1e ,o=de,dc=gac0l0. 0020: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 ..objectClass1.. 0030: 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d .inetOrgPerson0. 0040: 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0d 04 ..cn1...User20.. 0050: 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 04 09 .sn1...User20... 0060: 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 givenName1...Use 0070: 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f r20...userPasswo 0080: 72 64 31 06 04 04 70 61 73 73 rd1...pass read1msg: ld 0x8900620 msgid 5 message type search-entry wait4msg ld 0x8900620 0 s 94885 us to go wait4msg continue ld 0x8900620 msgid 5 all 2 ** ld 0x8900620 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:23 2009 ** ld 0x8900620 Outstanding Requests: * msgid 5, origid 5, status InProgress outstanding referrals 0, parent count 0 ld 0x8900620 request count 1 (abandoned 0) ** ld 0x8900620 Response Queue: * msgid 5, type 100 ld 0x8900620 response count 1 ldap_chkResponseList ld 0x8900620 msgid 5 all 2 ldap_chkResponseList returns ld 0x8900620 msgid 5, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x89000f8 ptr=0x89000fb end=0x8900182 len=135 0000: 64 81 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d d....cn=User2,o= 0010: 64 65 2c 64 63 3d 67 61 63 30 6c 30 1e 04 0b 6f de,dc=gac0l0...o 0020: 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e bjectClass1...in 0030: 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 etOrgPerson0...c 0040: 6e 31 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e n1...User20...sn 0050: 31 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 1...User20...giv 0060: 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 enName1...User20 0070: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 ...userPassword1 0080: 06 04 04 70 61 73 73 ...pass [rw] searchResult: "cn=User2,o=de,dc=gac" -> "cn=User2,o=de,dc=gac" >>> dnPrettyNormal: <cn=User2,o=de,dc=gac> => ldap_bv2dn(cn=User2,o=de,dc=gac,0) <= ldap_bv2dn(cn=User2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=User2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnPrettyNormal: <cn=User2,o=de,dc=gac>, <cn=user2,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900116 end=0x8900182 len=108 0000: 30 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e ...inetOrgPerson 0020: 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0...cn1...User20 0030: 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 ...sn1...User20. 0040: 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 ..givenName1...U 0050: 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 ser20...userPass 0060: 77 6f 72 64 31 06 04 04 70 61 73 73 word1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x8900125 end=0x8900182 len=93 0000: 00 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f ....inetOrgPerso 0010: 6e 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 n0...cn1...User2 0020: 30 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 0...sn1...User20 0030: 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 ...givenName1... 0040: 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 User20...userPas 0050: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900136 end=0x8900182 len=76 0000: 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0...cn1...User20 0010: 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 ...sn1...User20. 0020: 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 ..givenName1...U 0030: 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 ser20...userPass 0040: 77 6f 72 64 31 06 04 04 70 61 73 73 word1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x890013c end=0x8900182 len=70 0000: 00 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e 31 ....User20...sn1 0010: 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 65 ...User20...give 0020: 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 16 nName1...User20. 0030: 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 ..userPassword1. 0040: 04 04 70 61 73 73 ..pass ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900145 end=0x8900182 len=61 0000: 30 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 0...sn1...User20 0010: 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 ...givenName1... 0020: 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 User20...userPas 0030: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x890014b end=0x8900182 len=55 0000: 00 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 ....User20...giv 0010: 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 enName1...User20 0020: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 ...userPassword1 0030: 06 04 04 70 61 73 73 ...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900154 end=0x8900182 len=46 0000: 30 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 0...givenName1.. 0010: 05 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 .User20...userPa 0020: 73 73 77 6f 72 64 31 06 04 04 70 61 73 73 ssword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x8900161 end=0x8900182 len=33 0000: 00 07 04 05 55 73 65 72 32 30 16 04 0c 75 73 65 ....User20...use 0010: 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 61 73 rPassword1...pas 0020: 73 s ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x890016a end=0x8900182 len=24 0000: 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 0...userPassword 0010: 31 06 04 04 70 61 73 73 1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x890017a end=0x8900182 len=8 0000: 00 06 04 04 70 61 73 73 ....pass ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900182 end=0x8900182 len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x89000f8 ptr=0x89000fb end=0x8900182 len=135 0000: 64 81 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d d....cn=User2,o= 0010: 64 65 2c 64 63 3d 67 61 63 00 6c 30 1e 04 0b 6f de,dc=gac.l0...o 0020: 62 6a 65 63 74 43 6c 61 73 73 00 0f 04 0d 69 6e bjectClass....in 0030: 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 etOrgPerson0...c 0040: 6e 00 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e n....User20...sn 0050: 00 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 ....User20...giv 0060: 65 6e 4e 61 6d 65 00 07 04 05 55 73 65 72 32 30 enName....User20 0070: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 00 ...userPassword. 0080: 06 04 04 70 61 73 73 ...pass => access_allowed: auth access to "cn=User2,o=de,dc=gac" "userPassword" requested => dn: [1] => acl_get: [2] attr userPassword => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "userPassword" requested => acl_mask: to all values by "", (=0) <= check a_dn_pat: cn=datadmin,dc=gac <= check a_dn_pat: * <= acl_mask: [2] applying auth(=xd) (stop) <= acl_mask: [2] mask: auth(=xd) => slap_access_allowed: auth access granted by auth(=xd) => access_allowed: auth access granted by auth(=xd) slap_ap_lookup: str2ad(cmusaslsecretDIGEST-MD5): attribute type undefined ldap_msgfree ldap_result ld 0x8900620 msgid 5 wait4msg ld 0x8900620 msgid 5 (timeout 0 usec) wait4msg continue ld 0x8900620 msgid 5 all 2 ** ld 0x8900620 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:23 2009 ** ld 0x8900620 Outstanding Requests: * msgid 5, origid 5, status InProgress outstanding referrals 0, parent count 0 ld 0x8900620 request count 1 (abandoned 0) ** ld 0x8900620 Response Queue: Empty ld 0x8900620 response count 0 ldap_chkResponseList ld 0x8900620 msgid 5 all 2 ldap_chkResponseList returns ld 0x8900620 NULL ldap_int_select read1msg: ld 0x8900620 msgid 5 all 2 ber_get_next ldap_read: want=8, got=8 0000: 30 0c 02 01 05 65 07 0a 0....e.. ldap_read: want=6, got=6 0000: 01 00 04 00 04 00 ...... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x88ecb80 ptr=0x88ecb80 end=0x88ecb8c len=12 0000: 02 01 05 65 07 0a 01 00 04 00 04 00 ...e........ read1msg: ld 0x8900620 msgid 5 message type search-result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x88ecb80 ptr=0x88ecb83 end=0x88ecb8c len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ read1msg: ld 0x8900620 0 new referrals read1msg: mark request completed, ld 0x8900620 msgid 5 request done: ld 0x8900620 msgid 5 res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 5, msgid 5) ldap_free_connection 0 1 ldap_free_connection: refcnt 1 ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x88ecb80 ptr=0x88ecb83 end=0x88ecb8c len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ ber_scanf fmt (}) ber: ber_dump: buf=0x88ecb80 ptr=0x88ecb8c end=0x88ecb8c len=0 conn=3 op=1 meta_back_search[0] match="" err=0. ldap_msgfree send_ldap_result: conn=3 op=1 p=3 send_ldap_result: err=0 matched="" text="" SASL Canonicalize [conn=3]: authzid="user2@de" SASL proxy authorize [conn=3]: authcid="user2@de" authzid="user2@de" conn=3 op=1 BIND authcid="user2@de" authzid="user2@de" SASL Authorize [conn=3]: proxy authorization allowed authzDN="" send_ldap_sasl: err=0 len=40 conn=3 op=1 BIND dn="cn=user2,o=de,dc=gac" mech=DIGEST-MD5 sasl_ssf=128 ssf=128 do_bind: SASL/DIGEST-MD5 bind: dn="cn=user2,o=de,dc=gac" sasl_ssf=128 send_ldap_response: msgid=2 tag=97 err=0 ber_flush2: 56 bytes to sd 11 0000: 30 36 02 01 02 61 31 0a 01 00 04 00 04 00 87 28 06...a1........( 0010: 72 73 70 61 75 74 68 3d 36 34 64 32 34 61 33 66 rspauth=64d24a3f 0020: 35 36 32 65 64 62 62 64 35 66 39 61 33 61 62 62 562edbbd5f9a3abb 0030: 36 34 35 39 34 62 37 61 64594b7a ldap_write: want=56, written=56 0000: 30 36 02 01 02 61 31 0a 01 00 04 00 04 00 87 28 06...a1........( 0010: 72 73 70 61 75 74 68 3d 36 34 64 32 34 61 33 66 rspauth=64d24a3f 0020: 35 36 32 65 64 62 62 64 35 66 39 61 33 61 62 62 562edbbd5f9a3abb 0030: 36 34 35 39 34 62 37 61 64594b7a conn=3 op=1 RESULT tag=97 err=0 text= <== slap_sasl_bind: rc=0 daemon: activity on 1 descriptor daemon: activity on: 11r daemon: read active on 11 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(11) connection_get(11): got connid=3 connection_read(11): checking for input on id=3 ldap_pvt_sasl_install ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 3d ...= sasl_read: want=61, got=61 0000: 61 16 8b 42 1b 22 4d 2a 76 d5 8a 4c ae c0 47 ea a..B."M*v..L..G. 0010: 15 10 7e 7f a7 72 20 20 d9 cc d5 f6 47 ca e4 01 ..~..r ....G... 0020: 9f 09 d0 1e 86 e0 a2 7e 23 a4 fd 64 2d 1b 7e b7 .......~#..d-.~. 0030: 7a 9b f5 35 56 1b dd 00 01 00 00 00 00 z..5V........ ldap_read: want=8, got=8 0000: 30 2b 02 01 03 63 26 04 0+...c&. ldap_read: want=37, got=37 0000: 06 64 63 3d 67 61 63 0a 01 02 0a 01 00 02 01 00 .dc=gac......... 0010: 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 63 6c ........objectcl 0020: 61 73 73 30 00 ass0. ber_get_next: tag 0x30 len 43 contents: ber_dump: buf=0x8923fa0 ptr=0x8923fa0 end=0x8923fcb len=43 0000: 02 01 03 63 26 04 06 64 63 3d 67 61 63 0a 01 02 ...c&..dc=gac... 0010: 0a 01 00 02 01 00 02 01 00 01 01 00 87 0b 6f 62 ..............ob 0020: 6a 65 63 74 63 6c 61 73 73 30 00 jectclass0. ber_get_next sasl_read: want=4 error=Resource temporarily unavailable ldap_read: want=8 error=Resource temporarily unavailable conn=3 op=2 do_search ber_scanf fmt ({miiiib) ber: ber_dump: buf=0x8923fa0 ptr=0x8923fa3 end=0x8923fcb len=40 0000: 63 26 04 06 64 63 3d 67 61 63 0a 01 02 0a 01 00 c&..dc=gac...... 0010: 02 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 ...........objec 0020: 74 63 6c 61 73 73 30 00 tclass0. >>> dnPrettyNormal: <dc=gac> => ldap_bv2dn(dc=gac,0) <= ldap_bv2dn(dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=gac)=0 <<< dnPrettyNormal: <dc=gac>, <dc=gac> SRCH "dc=gac" 2 0 0 0 0 begin get_filter PRESENT ber_scanf fmt (m) ber: ber_dump: buf=0x8923fa0 ptr=0x8923fbc end=0x8923fcb len=15 0000: 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 30 00 ..objectclass0. end get_filter 0 filter: (objectClass=*) ber_scanf fmt ({M}}) ber: ber_dump: buf=0x8923fa0 ptr=0x8923fc9 end=0x8923fcb len=2 0000: 00 00 .. attrs: conn=3 op=2 SRCH base="dc=gac" scope=2 deref=0 filter="(objectClass=*)" ==> limits_get: conn=3 op=2 dn="cn=user2,o=de,dc=gac" ldap_create ldap_url_parse_ext(ldap://192.168.112.11) conn=3 op=2: meta_back_getconn[0] conn=3 op=2 meta_back_getconn: candidates=1 conn=3 inserted conn=3 op=2 >>> meta_back_search_start[0] conn=3 op=2 >>> meta_search_dobind_init[0] ldap_sasl_interactive_bind_s: user selected: digest-md5 ldap_int_sasl_bind: digest-md5 ldap_new_connection 1 1 0 ldap_int_open_connection ldap_connect_to_host: TCP 192.168.112.11:389 ldap_new_socket: 13 ldap_prepare_socket: 13 ldap_connect_to_host: Trying 192.168.112.11:389 ldap_pvt_connect: fd: 13 tm: -1 async: 0 daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL ldap_int_sasl_open: host=node-2.local ldap_sasl_bind_s ldap_sasl_bind ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x8920818 ptr=0x8920818 end=0x8920957 len=319 0000: 30 82 01 3b 02 01 01 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 78 77 e.gac",nonce="xw 0060: 4b 72 6a 59 52 4a 65 48 72 65 41 49 66 46 37 65 KrjYRJeHreAIfF7e 0070: 55 61 33 2b 4c 64 31 39 78 78 74 4b 76 61 34 38 Ua3+Ld19xxtKva48 0080: 6e 39 4c 39 38 46 56 71 41 3d 22 2c 63 6e 6f 6e n9L98FVqA=",cnon 0090: 63 65 3d 22 43 33 59 47 59 47 72 34 76 56 41 4f ce="C3YGYGr4vVAO 00a0: 61 71 63 48 59 48 47 44 76 4e 44 77 4a 54 30 46 aqcHYHGDvNDwJT0F 00b0: 6f 59 47 77 51 75 42 52 49 68 58 4f 73 5a 41 3d oYGwQuBRIhXOsZA= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 32 2c 71 6f ",nc=00000002,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 31 ocal",response=1 0120: 39 34 63 34 63 64 36 32 33 30 36 66 30 38 61 32 94c4cd62306f08a2 0130: 61 38 30 64 36 31 32 65 32 61 65 36 63 37 38 a80d612e2ae6c78 ber_scanf fmt ({i) ber: ber_dump: buf=0x8920818 ptr=0x892081f end=0x8920957 len=312 0000: 60 82 01 34 02 01 03 04 12 63 6e 3d 64 61 74 61 `..4.....cn=data 0010: 64 6d 69 6e 2c 64 63 3d 67 61 63 a3 82 01 19 04 dmin,dc=gac..... 0020: 0a 44 49 47 45 53 54 2d 4d 44 35 04 82 01 09 75 .DIGEST-MD5....u 0030: 73 65 72 6e 61 6d 65 3d 22 72 6f 6f 74 22 2c 72 sername="root",r 0040: 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c ealm="node.gac", 0050: 6e 6f 6e 63 65 3d 22 78 77 4b 72 6a 59 52 4a 65 nonce="xwKrjYRJe 0060: 48 72 65 41 49 66 46 37 65 55 61 33 2b 4c 64 31 HreAIfF7eUa3+Ld1 0070: 39 78 78 74 4b 76 61 34 38 6e 39 4c 39 38 46 56 9xxtKva48n9L98FV 0080: 71 41 3d 22 2c 63 6e 6f 6e 63 65 3d 22 43 33 59 qA=",cnonce="C3Y 0090: 47 59 47 72 34 76 56 41 4f 61 71 63 48 59 48 47 GYGr4vVAOaqcHYHG 00a0: 44 76 4e 44 77 4a 54 30 46 6f 59 47 77 51 75 42 DvNDwJT0FoYGwQuB 00b0: 52 49 68 58 4f 73 5a 41 3d 22 2c 6e 63 3d 30 30 RIhXOsZA=",nc=00 00c0: 30 30 30 30 30 32 2c 71 6f 70 3d 61 75 74 68 2d 000002,qop=auth- 00d0: 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 34 2c conf,cipher=rc4, 00e0: 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 35 2c maxbuf=16777215, 00f0: 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 61 70 digest-uri="ldap 0100: 2f 6e 6f 64 65 2d 32 2e 6c 6f 63 61 6c 22 2c 72 /node-2.local",r 0110: 65 73 70 6f 6e 73 65 3d 31 39 34 63 34 63 64 36 esponse=194c4cd6 0120: 32 33 30 36 66 30 38 61 32 61 38 30 64 36 31 32 2306f08a2a80d612 0130: 65 32 61 65 36 63 37 38 e2ae6c78 ber_flush2: 319 bytes to sd 13 0000: 30 82 01 3b 02 01 01 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 78 77 e.gac",nonce="xw 0060: 4b 72 6a 59 52 4a 65 48 72 65 41 49 66 46 37 65 KrjYRJeHreAIfF7e 0070: 55 61 33 2b 4c 64 31 39 78 78 74 4b 76 61 34 38 Ua3+Ld19xxtKva48 0080: 6e 39 4c 39 38 46 56 71 41 3d 22 2c 63 6e 6f 6e n9L98FVqA=",cnon 0090: 63 65 3d 22 43 33 59 47 59 47 72 34 76 56 41 4f ce="C3YGYGr4vVAO 00a0: 61 71 63 48 59 48 47 44 76 4e 44 77 4a 54 30 46 aqcHYHGDvNDwJT0F 00b0: 6f 59 47 77 51 75 42 52 49 68 58 4f 73 5a 41 3d oYGwQuBRIhXOsZA= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 32 2c 71 6f ",nc=00000002,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 31 ocal",response=1 0120: 39 34 63 34 63 64 36 32 33 30 36 66 30 38 61 32 94c4cd62306f08a2 0130: 61 38 30 64 36 31 32 65 32 61 65 36 63 37 38 a80d612e2ae6c78 ldap_write: want=319, written=319 0000: 30 82 01 3b 02 01 01 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 78 77 e.gac",nonce="xw 0060: 4b 72 6a 59 52 4a 65 48 72 65 41 49 66 46 37 65 KrjYRJeHreAIfF7e 0070: 55 61 33 2b 4c 64 31 39 78 78 74 4b 76 61 34 38 Ua3+Ld19xxtKva48 0080: 6e 39 4c 39 38 46 56 71 41 3d 22 2c 63 6e 6f 6e n9L98FVqA=",cnon 0090: 63 65 3d 22 43 33 59 47 59 47 72 34 76 56 41 4f ce="C3YGYGr4vVAO 00a0: 61 71 63 48 59 48 47 44 76 4e 44 77 4a 54 30 46 aqcHYHGDvNDwJT0F 00b0: 6f 59 47 77 51 75 42 52 49 68 58 4f 73 5a 41 3d oYGwQuBRIhXOsZA= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 32 2c 71 6f ",nc=00000002,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 31 ocal",response=1 0120: 39 34 63 34 63 64 36 32 33 30 36 66 30 38 61 32 94c4cd62306f08a2 0130: 61 38 30 64 36 31 32 65 32 61 65 36 63 37 38 a80d612e2ae6c78 ldap_result ld 0x88f5380 msgid 1 wait4msg ld 0x88f5380 msgid 1 (infinite timeout) wait4msg continue ld 0x88f5380 msgid 1 all 1 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 1, origid 1, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 1 all 1 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 1 all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 81 e1 02 01 01 61 81 0.....a. ldap_read: want=220, got=220 0000: db 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 29 3a ........SASL(0): 0010: 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 73 75 successful resu 0020: 6c 74 3a 20 87 81 b5 6e 6f 6e 63 65 3d 22 49 6a lt: ...nonce="Ij 0030: 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 q+Ki4kJzVIztl3GQ 0040: 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 6x7QynwsORjodGzT 0050: 61 48 46 74 52 44 4c 43 41 3d 22 2c 72 65 61 6c aHFtRDLCA=",real 0060: 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c 71 6f 70 m="node.gac",qop 0070: 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e 74 2c ="auth,auth-int, 0080: 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 68 65 auth-conf",ciphe 0090: 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d 35 36 r="rc4-40,rc4-56 00a0: 2c 72 63 34 2c 64 65 73 2c 33 64 65 73 22 2c 6d ,rc4,des,3des",m 00b0: 61 78 62 75 66 3d 36 35 35 33 36 2c 63 68 61 72 axbuf=65536,char 00c0: 73 65 74 3d 75 74 66 2d 38 2c 61 6c 67 6f 72 69 set=utf-8,algori 00d0: 74 68 6d 3d 6d 64 35 2d 73 65 73 73 thm=md5-sess ber_get_next: tag 0x30 len 225 contents: ber_dump: buf=0x89242a8 ptr=0x89242a8 end=0x8924389 len=225 0000: 02 01 01 61 81 db 0a 01 0e 04 00 04 1c 53 41 53 ...a.........SAS 0010: 4c 28 30 29 3a 20 73 75 63 63 65 73 73 66 75 6c L(0): successful 0020: 20 72 65 73 75 6c 74 3a 20 87 81 b5 6e 6f 6e 63 result: ...nonc 0030: 65 3d 22 49 6a 71 2b 4b 69 34 6b 4a 7a 56 49 7a e="Ijq+Ki4kJzVIz 0040: 74 6c 33 47 51 36 78 37 51 79 6e 77 73 4f 52 6a tl3GQ6x7QynwsORj 0050: 6f 64 47 7a 54 61 48 46 74 52 44 4c 43 41 3d 22 odGzTaHFtRDLCA=" 0060: 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 ,realm="node.gac 0070: 22 2c 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 ",qop="auth,auth 0080: 2d 69 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c -int,auth-conf", 0090: 63 69 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 cipher="rc4-40,r 00a0: 63 34 2d 35 36 2c 72 63 34 2c 64 65 73 2c 33 64 c4-56,rc4,des,3d 00b0: 65 73 22 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 es",maxbuf=65536 00c0: 2c 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 ,charset=utf-8,a 00d0: 6c 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 lgorithm=md5-ses 00e0: 73 s read1msg: ld 0x88f5380 msgid 1 message type bind ber_scanf fmt ({eAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x8924389 len=222 0000: 61 81 db 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re 0020: 73 75 6c 74 3a 20 87 81 b5 6e 6f 6e 63 65 3d 22 sult: ...nonce=" 0030: 49 6a 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 Ijq+Ki4kJzVIztl3 0040: 47 51 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 GQ6x7QynwsORjodG 0050: 7a 54 61 48 46 74 52 44 4c 43 41 3d 22 2c 72 65 zTaHFtRDLCA=",re 0060: 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c 71 alm="node.gac",q 0070: 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e op="auth,auth-in 0080: 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 t,auth-conf",cip 0090: 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d her="rc4-40,rc4- 00a0: 35 36 2c 72 63 34 2c 64 65 73 2c 33 64 65 73 22 56,rc4,des,3des" 00b0: 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 63 68 ,maxbuf=65536,ch 00c0: 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c 67 6f arset=utf-8,algo 00d0: 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 rithm=md5-sess read1msg: ld 0x88f5380 0 new referrals read1msg: mark request completed, ld 0x88f5380 msgid 1 request done: ld 0x88f5380 msgid 1 res_errno: 14, res_error: <SASL(0): successful result: >, res_matched: <> ldap_free_request (origid 1, msgid 1) ldap_free_connection 0 1 ldap_free_connection: refcnt 1 ldap_parse_sasl_bind_result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x8924389 len=222 0000: 61 81 db 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re 0020: 73 75 6c 74 3a 20 87 81 b5 6e 6f 6e 63 65 3d 22 sult: ...nonce=" 0030: 49 6a 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 Ijq+Ki4kJzVIztl3 0040: 47 51 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 GQ6x7QynwsORjodG 0050: 7a 54 61 48 46 74 52 44 4c 43 41 3d 22 2c 72 65 zTaHFtRDLCA=",re 0060: 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c 71 alm="node.gac",q 0070: 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e op="auth,auth-in 0080: 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 t,auth-conf",cip 0090: 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d her="rc4-40,rc4- 00a0: 35 36 2c 72 63 34 2c 64 65 73 2c 33 64 65 73 22 56,rc4,des,3des" 00b0: 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 63 68 ,maxbuf=65536,ch 00c0: 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c 67 6f arset=utf-8,algo 00d0: 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 rithm=md5-sess ber_scanf fmt (O) ber: ber_dump: buf=0x89242a8 ptr=0x89242d1 end=0x8924389 len=184 0000: 87 81 b5 6e 6f 6e 63 65 3d 22 49 6a 71 2b 4b 69 ...nonce="Ijq+Ki 0010: 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 36 78 37 51 4kJzVIztl3GQ6x7Q 0020: 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 61 48 46 74 ynwsORjodGzTaHFt 0030: 52 44 4c 43 41 3d 22 2c 72 65 61 6c 6d 3d 22 6e RDLCA=",realm="n 0040: 6f 64 65 2e 67 61 63 22 2c 71 6f 70 3d 22 61 75 ode.gac",qop="au 0050: 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 68 th,auth-int,auth 0060: 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 72 -conf",cipher="r 0070: 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 34 c4-40,rc4-56,rc4 0080: 2c 64 65 73 2c 33 64 65 73 22 2c 6d 61 78 62 75 ,des,3des",maxbu 0090: 66 3d 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d f=65536,charset= 00a0: 75 74 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d utf-8,algorithm= 00b0: 6d 64 35 2d 73 65 73 73 md5-sess ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x8924389 len=222 0000: 61 81 db 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re 0020: 73 75 6c 74 3a 20 87 81 b5 6e 6f 6e 63 65 3d 22 sult: ...nonce=" 0030: 49 6a 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 Ijq+Ki4kJzVIztl3 0040: 47 51 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 GQ6x7QynwsORjodG 0050: 7a 54 61 48 46 74 52 44 4c 43 41 3d 22 2c 72 65 zTaHFtRDLCA=",re 0060: 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c 71 alm="node.gac",q 0070: 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e op="auth,auth-in 0080: 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 t,auth-conf",cip 0090: 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d her="rc4-40,rc4- 00a0: 35 36 2c 72 63 34 2c 64 65 73 2c 33 64 65 73 22 56,rc4,des,3des" 00b0: 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 63 68 ,maxbuf=65536,ch 00c0: 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c 67 6f arset=utf-8,algo 00d0: 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 rithm=md5-sess ber_scanf fmt (x) ber: ber_dump: buf=0x89242a8 ptr=0x89242d1 end=0x8924389 len=184 0000: 87 81 b5 6e 6f 6e 63 65 3d 22 49 6a 71 2b 4b 69 ...nonce="Ijq+Ki 0010: 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 36 78 37 51 4kJzVIztl3GQ6x7Q 0020: 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 61 48 46 74 ynwsORjodGzTaHFt 0030: 52 44 4c 43 41 3d 22 2c 72 65 61 6c 6d 3d 22 6e RDLCA=",realm="n 0040: 6f 64 65 2e 67 61 63 22 2c 71 6f 70 3d 22 61 75 ode.gac",qop="au 0050: 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 68 th,auth-int,auth 0060: 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 72 -conf",cipher="r 0070: 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 34 c4-40,rc4-56,rc4 0080: 2c 64 65 73 2c 33 64 65 73 22 2c 6d 61 78 62 75 ,des,3des",maxbu 0090: 66 3d 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d f=65536,charset= 00a0: 75 74 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d utf-8,algorithm= 00b0: 6d 64 35 2d 73 65 73 73 md5-sess ber_scanf fmt (}) ber: ber_dump: buf=0x89242a8 ptr=0x8924389 end=0x8924389 len=0 ldap_msgfree sasl_client_step: 1 ldap_sasl_bind_s ldap_sasl_bind ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x89304a0 ptr=0x89304a0 end=0x89305df len=319 0000: 30 82 01 3b 02 01 02 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 49 6a e.gac",nonce="Ij 0060: 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 q+Ki4kJzVIztl3GQ 0070: 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 6x7QynwsORjodGzT 0080: 61 48 46 74 52 44 4c 43 41 3d 22 2c 63 6e 6f 6e aHFtRDLCA=",cnon 0090: 63 65 3d 22 50 50 39 72 32 38 6e 37 2b 55 6f 41 ce="PP9r28n7+UoA 00a0: 49 35 76 48 61 50 63 58 45 6a 6d 4b 68 73 34 37 I5vHaPcXEjmKhs47 00b0: 6d 79 2f 75 6d 57 70 65 61 52 4f 48 79 45 30 3d my/umWpeaROHyE0= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c 71 6f ",nc=00000001,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 34 ocal",response=4 0120: 31 38 35 35 38 30 32 63 36 38 63 62 32 38 61 66 1855802c68cb28af 0130: 35 34 31 31 63 66 32 37 66 66 31 38 31 65 36 5411cf27ff181e6 ber_scanf fmt ({i) ber: ber_dump: buf=0x89304a0 ptr=0x89304a7 end=0x89305df len=312 0000: 60 82 01 34 02 01 03 04 12 63 6e 3d 64 61 74 61 `..4.....cn=data 0010: 64 6d 69 6e 2c 64 63 3d 67 61 63 a3 82 01 19 04 dmin,dc=gac..... 0020: 0a 44 49 47 45 53 54 2d 4d 44 35 04 82 01 09 75 .DIGEST-MD5....u 0030: 73 65 72 6e 61 6d 65 3d 22 72 6f 6f 74 22 2c 72 sername="root",r 0040: 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c ealm="node.gac", 0050: 6e 6f 6e 63 65 3d 22 49 6a 71 2b 4b 69 34 6b 4a nonce="Ijq+Ki4kJ 0060: 7a 56 49 7a 74 6c 33 47 51 36 78 37 51 79 6e 77 zVIztl3GQ6x7Qynw 0070: 73 4f 52 6a 6f 64 47 7a 54 61 48 46 74 52 44 4c sORjodGzTaHFtRDL 0080: 43 41 3d 22 2c 63 6e 6f 6e 63 65 3d 22 50 50 39 CA=",cnonce="PP9 0090: 72 32 38 6e 37 2b 55 6f 41 49 35 76 48 61 50 63 r28n7+UoAI5vHaPc 00a0: 58 45 6a 6d 4b 68 73 34 37 6d 79 2f 75 6d 57 70 XEjmKhs47my/umWp 00b0: 65 61 52 4f 48 79 45 30 3d 22 2c 6e 63 3d 30 30 eaROHyE0=",nc=00 00c0: 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 68 2d 000001,qop=auth- 00d0: 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 34 2c conf,cipher=rc4, 00e0: 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 35 2c maxbuf=16777215, 00f0: 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 61 70 digest-uri="ldap 0100: 2f 6e 6f 64 65 2d 32 2e 6c 6f 63 61 6c 22 2c 72 /node-2.local",r 0110: 65 73 70 6f 6e 73 65 3d 34 31 38 35 35 38 30 32 esponse=41855802 0120: 63 36 38 63 62 32 38 61 66 35 34 31 31 63 66 32 c68cb28af5411cf2 0130: 37 66 66 31 38 31 65 36 7ff181e6 ber_flush2: 319 bytes to sd 13 0000: 30 82 01 3b 02 01 02 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 49 6a e.gac",nonce="Ij 0060: 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 q+Ki4kJzVIztl3GQ 0070: 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 6x7QynwsORjodGzT 0080: 61 48 46 74 52 44 4c 43 41 3d 22 2c 63 6e 6f 6e aHFtRDLCA=",cnon 0090: 63 65 3d 22 50 50 39 72 32 38 6e 37 2b 55 6f 41 ce="PP9r28n7+UoA 00a0: 49 35 76 48 61 50 63 58 45 6a 6d 4b 68 73 34 37 I5vHaPcXEjmKhs47 00b0: 6d 79 2f 75 6d 57 70 65 61 52 4f 48 79 45 30 3d my/umWpeaROHyE0= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c 71 6f ",nc=00000001,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 34 ocal",response=4 0120: 31 38 35 35 38 30 32 63 36 38 63 62 32 38 61 66 1855802c68cb28af 0130: 35 34 31 31 63 66 32 37 66 66 31 38 31 65 36 5411cf27ff181e6 ldap_write: want=319, written=319 0000: 30 82 01 3b 02 01 02 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 49 6a e.gac",nonce="Ij 0060: 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 q+Ki4kJzVIztl3GQ 0070: 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 6x7QynwsORjodGzT 0080: 61 48 46 74 52 44 4c 43 41 3d 22 2c 63 6e 6f 6e aHFtRDLCA=",cnon 0090: 63 65 3d 22 50 50 39 72 32 38 6e 37 2b 55 6f 41 ce="PP9r28n7+UoA 00a0: 49 35 76 48 61 50 63 58 45 6a 6d 4b 68 73 34 37 I5vHaPcXEjmKhs47 00b0: 6d 79 2f 75 6d 57 70 65 61 52 4f 48 79 45 30 3d my/umWpeaROHyE0= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c 71 6f ",nc=00000001,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 34 ocal",response=4 0120: 31 38 35 35 38 30 32 63 36 38 63 62 32 38 61 66 1855802c68cb28af 0130: 35 34 31 31 63 66 32 37 66 66 31 38 31 65 36 5411cf27ff181e6 ldap_result ld 0x88f5380 msgid 2 wait4msg ld 0x88f5380 msgid 2 (infinite timeout) wait4msg continue ld 0x88f5380 msgid 2 all 1 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 2 all 1 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 2 all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 36 02 01 02 61 31 0a 06...a1. ldap_read: want=48, got=48 0000: 01 00 04 00 04 00 87 28 72 73 70 61 75 74 68 3d .......(rspauth= 0010: 35 36 65 64 61 37 65 64 32 65 62 38 63 38 39 32 56eda7ed2eb8c892 0020: 66 30 34 62 32 30 34 65 65 34 64 30 35 35 34 37 f04b204ee4d05547 ber_get_next: tag 0x30 len 54 contents: ber_dump: buf=0x89242a8 ptr=0x89242a8 end=0x89242de len=54 0000: 02 01 02 61 31 0a 01 00 04 00 04 00 87 28 72 73 ...a1........(rs 0010: 70 61 75 74 68 3d 35 36 65 64 61 37 65 64 32 65 pauth=56eda7ed2e 0020: 62 38 63 38 39 32 66 30 34 62 32 30 34 65 65 34 b8c892f04b204ee4 0030: 64 30 35 35 34 37 d05547 read1msg: ld 0x88f5380 msgid 2 message type bind ber_scanf fmt ({eAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x89242de len=51 0000: 61 31 0a 01 00 04 00 04 00 87 28 72 73 70 61 75 a1........(rspau 0010: 74 68 3d 35 36 65 64 61 37 65 64 32 65 62 38 63 th=56eda7ed2eb8c 0020: 38 39 32 66 30 34 62 32 30 34 65 65 34 64 30 35 892f04b204ee4d05 0030: 35 34 37 547 read1msg: ld 0x88f5380 0 new referrals read1msg: mark request completed, ld 0x88f5380 msgid 2 request done: ld 0x88f5380 msgid 2 res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 2, msgid 2) ldap_free_connection 0 1 ldap_free_connection: refcnt 1 ldap_parse_sasl_bind_result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x89242de len=51 0000: 61 31 0a 01 00 04 00 04 00 87 28 72 73 70 61 75 a1........(rspau 0010: 74 68 3d 35 36 65 64 61 37 65 64 32 65 62 38 63 th=56eda7ed2eb8c 0020: 38 39 32 66 30 34 62 32 30 34 65 65 34 64 30 35 892f04b204ee4d05 0030: 35 34 37 547 ber_scanf fmt (O) ber: ber_dump: buf=0x89242a8 ptr=0x89242b4 end=0x89242de len=42 0000: 87 28 72 73 70 61 75 74 68 3d 35 36 65 64 61 37 .(rspauth=56eda7 0010: 65 64 32 65 62 38 63 38 39 32 66 30 34 62 32 30 ed2eb8c892f04b20 0020: 34 65 65 34 64 30 35 35 34 37 4ee4d05547 ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x89242de len=51 0000: 61 31 0a 01 00 04 00 04 00 87 28 72 73 70 61 75 a1........(rspau 0010: 74 68 3d 35 36 65 64 61 37 65 64 32 65 62 38 63 th=56eda7ed2eb8c 0020: 38 39 32 66 30 34 62 32 30 34 65 65 34 64 30 35 892f04b204ee4d05 0030: 35 34 37 547 ber_scanf fmt (x) ber: ber_dump: buf=0x89242a8 ptr=0x89242b4 end=0x89242de len=42 0000: 87 28 72 73 70 61 75 74 68 3d 35 36 65 64 61 37 .(rspauth=56eda7 0010: 65 64 32 65 62 38 63 38 39 32 66 30 34 62 32 30 ed2eb8c892f04b20 0020: 34 65 65 34 64 30 35 35 34 37 4ee4d05547 ber_scanf fmt (}) ber: ber_dump: buf=0x89242a8 ptr=0x89242de end=0x89242de len=0 ldap_msgfree sasl_client_step: 0 ldap_pvt_sasl_install conn=3 op=2 <<< meta_search_dobind_init[0]=1 [rw] searchBase: "dc=gac" -> "dc=gac" [rw] searchFilter: "(objectClass=*)" -> "(objectClass=*)" ldap_search_ext put_filter: "(objectClass=*)" put_filter: simple put_simple_filter: "objectClass=*" ldap_build_search_req ATTRS: * ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x89314e8 ptr=0x89314e8 end=0x8931517 len=47 0000: 30 2d 02 01 03 63 28 04 06 64 63 3d 67 61 63 0a 0-...c(..dc=gac. 0010: 01 02 0a 01 00 02 02 01 f4 02 02 0e 10 01 01 00 ................ 0020: 87 0b 6f 62 6a 65 63 74 43 6c 61 73 73 30 00 ..objectClass0. ber_scanf fmt ({) ber: ber_dump: buf=0x89314e8 ptr=0x89314ed end=0x8931517 len=42 0000: 63 28 04 06 64 63 3d 67 61 63 0a 01 02 0a 01 00 c(..dc=gac...... 0010: 02 02 01 f4 02 02 0e 10 01 01 00 87 0b 6f 62 6a .............obj 0020: 65 63 74 43 6c 61 73 73 30 00 ectClass0. ber_flush2: 47 bytes to sd 13 0000: 30 2d 02 01 03 63 28 04 06 64 63 3d 67 61 63 0a 0-...c(..dc=gac. 0010: 01 02 0a 01 00 02 02 01 f4 02 02 0e 10 01 01 00 ................ 0020: 87 0b 6f 62 6a 65 63 74 43 6c 61 73 73 30 00 ..objectClass0. sasl_write: want=67, written=67 0000: 00 00 00 3f 30 03 26 1a c6 d2 e0 d3 73 5a 16 f7 ...?0.&.....sZ.. 0010: 14 f8 04 b2 0a e8 79 e3 0c ea ec 99 c6 24 ff 09 ......y......$.. 0020: f5 56 8e 48 69 83 39 95 bf ed 32 b7 0d 1e 8c fe .V.Hi.9...2..... 0030: 43 f2 f3 cb 20 cb e7 88 87 0a ce 3e ea 00 01 00 C... ......>.... 0040: 00 00 00 ... ldap_write: want=47, written=47 0000: 30 2d 02 01 03 63 28 04 06 64 63 3d 67 61 63 0a 0-...c(..dc=gac. 0010: 01 02 0a 01 00 02 02 01 f4 02 02 0e 10 01 01 00 ................ 0020: 87 0b 6f 62 6a 65 63 74 43 6c 61 73 73 30 00 ..objectClass0. conn=3 op=2 <<< meta_back_search_start[0]=1 conn=3 op=2 meta_back_search: ncandidates=1 cnd="*" ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 37 ...7 sasl_read: want=55, got=55 0000: 13 01 fe 47 77 d4 71 21 9b 42 1d 85 74 36 e7 ce ...Gw.q!.B..t6.. 0010: b3 66 a5 15 94 42 5e 09 19 23 d2 a4 c3 43 e8 4f .f...B^..#...C.O 0020: bd f5 12 ac c9 8d 4d 5c fc 3e 52 cc c6 45 60 8a ......M\.>R..E`. 0030: 1d 00 01 00 00 00 00 ....... ldap_read: want=8, got=8 0000: 30 25 02 01 03 64 20 04 0%...d . ldap_read: want=31, got=31 0000: 06 64 63 3d 67 61 63 30 16 30 14 04 0b 6f 62 6a .dc=gac0.0...obj 0010: 65 63 74 43 6c 61 73 73 31 05 04 03 74 6f 70 ectClass1...top ber_get_next: tag 0x30 len 37 contents: ber_dump: buf=0x89246f0 ptr=0x89246f0 end=0x8924715 len=37 0000: 02 01 03 64 20 04 06 64 63 3d 67 61 63 30 16 30 ...d ..dc=gac0.0 0010: 14 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 05 ...objectClass1. 0020: 04 03 74 6f 70 ..top read1msg: ld 0x88f5380 msgid 3 message type search-entry wait4msg ld 0x88f5380 0 s 97635 us to go wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x89246f0 ptr=0x89246f3 end=0x8924715 len=34 0000: 64 20 04 06 64 63 3d 67 61 63 30 16 30 14 04 0b d ..dc=gac0.0... 0010: 6f 62 6a 65 63 74 43 6c 61 73 73 31 05 04 03 74 objectClass1...t 0020: 6f 70 op [rw] searchResult: "dc=gac" -> "dc=gac" >>> dnPrettyNormal: <dc=gac> => ldap_bv2dn(dc=gac,0) <= ldap_bv2dn(dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=gac)=0 <<< dnPrettyNormal: <dc=gac>, <dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x89246f0 ptr=0x89246ff end=0x8924715 len=22 0000: 30 14 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 05 04 03 74 6f 70 ...top ber_scanf fmt ([W]) ber: ber_dump: buf=0x89246f0 ptr=0x892470e end=0x8924715 len=7 0000: 00 05 04 03 74 6f 70 ....top ber_scanf fmt ({m) ber: ber_dump: buf=0x89246f0 ptr=0x8924715 end=0x8924715 len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x89246f0 ptr=0x89246f3 end=0x8924715 len=34 0000: 64 20 04 06 64 63 3d 67 61 63 00 16 30 14 04 0b d ..dc=gac..0... 0010: 6f 62 6a 65 63 74 43 6c 61 73 73 00 05 04 03 74 objectClass....t 0020: 6f 70 op => send_search_entry: conn 3 dn="dc=gac" => access_allowed: read access to "dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dnpat: [6] cn=contacts,cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dn: [7] dc=gac => acl_get: [7] matched => acl_get: [7] attr entry => acl_mask: access to entry "dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying search(=scxd) (stop) <= acl_mask: [1] mask: search(=scxd) => slap_access_allowed: read access denied by search(=scxd) => access_allowed: no more rules send_search_entry: conn 3 access to entry (dc=gac) not allowed ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 6a ...j sasl_read: want=106, got=106 0000: 52 3b c0 02 7c b2 5c d6 b8 c1 1a 03 48 02 c5 29 R;..|.\.....H..) 0010: 6c 8c 11 4d 62 3c 58 0d 55 6c 8d 93 43 4f 52 1c l..Mb<X.Ul..COR. 0020: 57 f2 80 ae 0b 13 6c 9b 20 7f c6 68 59 ab 3d e4 W.....l. ..hY.=. 0030: f0 f9 5e 0d 46 45 56 14 a1 f3 47 6e 0a 69 81 7f ..^.FEV...Gn.i.. 0040: 48 97 8a 50 84 c0 cb 7c e2 71 23 36 0b 27 8a 81 H..P...|.q#6.'.. 0050: 57 be 29 39 a1 3d 95 f1 15 8c 21 c2 f9 85 59 76 W.)9.=....!...Yv 0060: 2e da 89 1a 00 01 00 00 00 01 .......... ldap_read: want=8, got=8 0000: 30 58 02 01 03 64 53 04 0X...dS. ldap_read: want=82, got=82 0000: 0b 6f 3d 64 65 2c 64 63 3d 67 61 63 30 44 30 1d .o=de,dc=gac0D0. 0010: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0e 04 ..objectClass1.. 0020: 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 30 09 04 .organization0.. 0030: 01 6f 31 04 04 02 64 65 30 18 04 0b 64 65 73 63 .o1...de0...desc 0040: 72 69 70 74 69 6f 6e 31 09 04 07 64 65 2e 67 61 ription1...de.ga 0050: 63 2e c. ber_get_next: tag 0x30 len 88 contents: ber_dump: buf=0x89209d0 ptr=0x89209d0 end=0x8920a28 len=88 0000: 02 01 03 64 53 04 0b 6f 3d 64 65 2c 64 63 3d 67 ...dS..o=de,dc=g 0010: 61 63 30 44 30 1d 04 0b 6f 62 6a 65 63 74 43 6c ac0D0...objectCl 0020: 61 73 73 31 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 ass1...organizat 0030: 69 6f 6e 30 09 04 01 6f 31 04 04 02 64 65 30 18 ion0...o1...de0. 0040: 04 0b 64 65 73 63 72 69 70 74 69 6f 6e 31 09 04 ..description1.. 0050: 07 64 65 2e 67 61 63 2e .de.gac. read1msg: ld 0x88f5380 msgid 3 message type search-entry ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x89209d0 ptr=0x89209d3 end=0x8920a28 len=85 0000: 64 53 04 0b 6f 3d 64 65 2c 64 63 3d 67 61 63 30 dS..o=de,dc=gac0 0010: 44 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 D0...objectClass 0020: 31 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 1...organization 0030: 30 09 04 01 6f 31 04 04 02 64 65 30 18 04 0b 64 0...o1...de0...d 0040: 65 73 63 72 69 70 74 69 6f 6e 31 09 04 07 64 65 escription1...de 0050: 2e 67 61 63 2e .gac. [rw] searchResult: "o=de,dc=gac" -> "o=de,dc=gac" >>> dnPrettyNormal: <o=de,dc=gac> => ldap_bv2dn(o=de,dc=gac,0) <= ldap_bv2dn(o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(o=de,dc=gac)=0 <<< dnPrettyNormal: <o=de,dc=gac>, <o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x89209d0 ptr=0x89209e4 end=0x8920a28 len=68 0000: 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 30 ...organization0 0020: 09 04 01 6f 31 04 04 02 64 65 30 18 04 0b 64 65 ...o1...de0...de 0030: 73 63 72 69 70 74 69 6f 6e 31 09 04 07 64 65 2e scription1...de. 0040: 67 61 63 2e gac. ber_scanf fmt ([W]) ber: ber_dump: buf=0x89209d0 ptr=0x89209f3 end=0x8920a28 len=53 0000: 00 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e ....organization 0010: 30 09 04 01 6f 31 04 04 02 64 65 30 18 04 0b 64 0...o1...de0...d 0020: 65 73 63 72 69 70 74 69 6f 6e 31 09 04 07 64 65 escription1...de 0030: 2e 67 61 63 2e .gac. ber_scanf fmt ({m) ber: ber_dump: buf=0x89209d0 ptr=0x8920a03 end=0x8920a28 len=37 0000: 30 09 04 01 6f 31 04 04 02 64 65 30 18 04 0b 64 0...o1...de0...d 0010: 65 73 63 72 69 70 74 69 6f 6e 31 09 04 07 64 65 escription1...de 0020: 2e 67 61 63 2e .gac. ber_scanf fmt ([W]) ber: ber_dump: buf=0x89209d0 ptr=0x8920a08 end=0x8920a28 len=32 0000: 00 04 04 02 64 65 30 18 04 0b 64 65 73 63 72 69 ....de0...descri 0010: 70 74 69 6f 6e 31 09 04 07 64 65 2e 67 61 63 2e ption1...de.gac. ber_scanf fmt ({m) ber: ber_dump: buf=0x89209d0 ptr=0x8920a0e end=0x8920a28 len=26 0000: 30 18 04 0b 64 65 73 63 72 69 70 74 69 6f 6e 31 0...description1 0010: 09 04 07 64 65 2e 67 61 63 2e ...de.gac. ber_scanf fmt ([W]) ber: ber_dump: buf=0x89209d0 ptr=0x8920a1d end=0x8920a28 len=11 0000: 00 09 04 07 64 65 2e 67 61 63 2e ....de.gac. ber_scanf fmt ({m) ber: ber_dump: buf=0x89209d0 ptr=0x8920a28 end=0x8920a28 len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x89209d0 ptr=0x89209d3 end=0x8920a28 len=85 0000: 64 53 04 0b 6f 3d 64 65 2c 64 63 3d 67 61 63 00 dS..o=de,dc=gac. 0010: 44 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 D0...objectClass 0020: 00 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e ....organization 0030: 30 09 04 01 6f 00 04 04 02 64 65 30 18 04 0b 64 0...o....de0...d 0040: 65 73 63 72 69 70 74 69 6f 6e 00 09 04 07 64 65 escription....de 0050: 2e 67 61 63 2e .gac. => send_search_entry: conn 3 dn="o=de,dc=gac" => access_allowed: read access to "o=de,dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dnpat: [6] cn=contacts,cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dn: [7] dc=gac => acl_get: [7] matched => acl_get: [7] attr entry => acl_mask: access to entry "o=de,dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying search(=scxd) (stop) <= acl_mask: [1] mask: search(=scxd) => slap_access_allowed: read access denied by search(=scxd) => access_allowed: no more rules send_search_entry: conn 3 access to entry (o=de,dc=gac) not allowed ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 99 .... sasl_read: want=153, got=153 0000: b1 6f c7 5b a9 ac c5 68 79 16 5a f6 1f dd 67 98 .o.[...hy.Z...g. 0010: da d3 ce ae b5 2f 65 1d df 64 48 63 f7 e6 34 72 ...../e..dHc..4r 0020: 99 f1 a8 48 e3 60 b5 e7 2b 95 e0 5e 26 f3 ac cc ...H.`..+..^&... 0030: f6 f5 e8 af 29 68 f5 42 6b 14 69 25 46 28 92 0f ....)h.Bk.i%F(.. 0040: 71 b4 5b 67 f8 2d ae 29 a3 07 05 a4 19 2e 25 f5 q.[g.-.)......%. 0050: ff 99 9d 27 f7 37 b0 88 2b fd 81 a3 d8 ef 3d d8 ...'.7..+.....=. 0060: 69 36 0b 0e 92 a0 5b ba 67 ee 3d 07 72 77 9e 28 i6....[.g.=.rw.( 0070: 80 56 1f e2 fc b1 11 70 8f 74 d8 b6 ad 2c 92 d0 .V.....p.t...,.. 0080: 9a 75 96 aa e9 50 57 82 6c 56 aa 89 db 86 fd 95 .u...PW.lV...... 0090: b9 9e cd 00 01 00 00 00 02 ......... ldap_read: want=8, got=8 0000: 30 81 86 02 01 03 64 81 0.....d. ldap_read: want=129, got=129 0000: 80 04 13 63 6e 3d 55 73 65 72 2c 6f 3d 64 65 2c ...cn=User,o=de, 0010: 64 63 3d 67 61 63 30 69 30 1e 04 0b 6f 62 6a 65 dc=gac0i0...obje 0020: 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e 65 74 4f ctClass1...inetO 0030: 72 67 50 65 72 73 6f 6e 30 0c 04 02 63 6e 31 06 rgPerson0...cn1. 0040: 04 04 55 73 65 72 30 0c 04 02 73 6e 31 06 04 04 ..User0...sn1... 0050: 55 73 65 72 30 13 04 09 67 69 76 65 6e 4e 61 6d User0...givenNam 0060: 65 31 06 04 04 55 73 65 72 30 16 04 0c 75 73 65 e1...User0...use 0070: 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 61 73 rPassword1...pas 0080: 73 s ber_get_next: tag 0x30 len 134 contents: ber_dump: buf=0x8920ac0 ptr=0x8920ac0 end=0x8920b46 len=134 0000: 02 01 03 64 81 80 04 13 63 6e 3d 55 73 65 72 2c ...d....cn=User, 0010: 6f 3d 64 65 2c 64 63 3d 67 61 63 30 69 30 1e 04 o=de,dc=gac0i0.. 0020: 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 0d .objectClass1... 0030: 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0c 04 inetOrgPerson0.. 0040: 02 63 6e 31 06 04 04 55 73 65 72 30 0c 04 02 73 .cn1...User0...s 0050: 6e 31 06 04 04 55 73 65 72 30 13 04 09 67 69 76 n1...User0...giv 0060: 65 6e 4e 61 6d 65 31 06 04 04 55 73 65 72 30 16 enName1...User0. 0070: 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 ..userPassword1. 0080: 04 04 70 61 73 73 ..pass read1msg: ld 0x88f5380 msgid 3 message type search-entry ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b46 len=131 0000: 64 81 80 04 13 63 6e 3d 55 73 65 72 2c 6f 3d 64 d....cn=User,o=d 0010: 65 2c 64 63 3d 67 61 63 30 69 30 1e 04 0b 6f 62 e,dc=gac0i0...ob 0020: 6a 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e 65 jectClass1...ine 0030: 74 4f 72 67 50 65 72 73 6f 6e 30 0c 04 02 63 6e tOrgPerson0...cn 0040: 31 06 04 04 55 73 65 72 30 0c 04 02 73 6e 31 06 1...User0...sn1. 0050: 04 04 55 73 65 72 30 13 04 09 67 69 76 65 6e 4e ..User0...givenN 0060: 61 6d 65 31 06 04 04 55 73 65 72 30 16 04 0c 75 ame1...User0...u 0070: 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 serPassword1...p 0080: 61 73 73 ass [rw] searchResult: "cn=User,o=de,dc=gac" -> "cn=User,o=de,dc=gac" >>> dnPrettyNormal: <cn=User,o=de,dc=gac> => ldap_bv2dn(cn=User,o=de,dc=gac,0) <= ldap_bv2dn(cn=User,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=User,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user,o=de,dc=gac)=0 <<< dnPrettyNormal: <cn=User,o=de,dc=gac>, <cn=user,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920add end=0x8920b46 len=105 0000: 30 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e ...inetOrgPerson 0020: 30 0c 04 02 63 6e 31 06 04 04 55 73 65 72 30 0c 0...cn1...User0. 0030: 04 02 73 6e 31 06 04 04 55 73 65 72 30 13 04 09 ..sn1...User0... 0040: 67 69 76 65 6e 4e 61 6d 65 31 06 04 04 55 73 65 givenName1...Use 0050: 72 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 r0...userPasswor 0060: 64 31 06 04 04 70 61 73 73 d1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920aec end=0x8920b46 len=90 0000: 00 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f ....inetOrgPerso 0010: 6e 30 0c 04 02 63 6e 31 06 04 04 55 73 65 72 30 n0...cn1...User0 0020: 0c 04 02 73 6e 31 06 04 04 55 73 65 72 30 13 04 ...sn1...User0.. 0030: 09 67 69 76 65 6e 4e 61 6d 65 31 06 04 04 55 73 .givenName1...Us 0040: 65 72 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f er0...userPasswo 0050: 72 64 31 06 04 04 70 61 73 73 rd1...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920afd end=0x8920b46 len=73 0000: 30 0c 04 02 63 6e 31 06 04 04 55 73 65 72 30 0c 0...cn1...User0. 0010: 04 02 73 6e 31 06 04 04 55 73 65 72 30 13 04 09 ..sn1...User0... 0020: 67 69 76 65 6e 4e 61 6d 65 31 06 04 04 55 73 65 givenName1...Use 0030: 72 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 r0...userPasswor 0040: 64 31 06 04 04 70 61 73 73 d1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b03 end=0x8920b46 len=67 0000: 00 06 04 04 55 73 65 72 30 0c 04 02 73 6e 31 06 ....User0...sn1. 0010: 04 04 55 73 65 72 30 13 04 09 67 69 76 65 6e 4e ..User0...givenN 0020: 61 6d 65 31 06 04 04 55 73 65 72 30 16 04 0c 75 ame1...User0...u 0030: 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 serPassword1...p 0040: 61 73 73 ass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b0b end=0x8920b46 len=59 0000: 30 0c 04 02 73 6e 31 06 04 04 55 73 65 72 30 13 0...sn1...User0. 0010: 04 09 67 69 76 65 6e 4e 61 6d 65 31 06 04 04 55 ..givenName1...U 0020: 73 65 72 30 16 04 0c 75 73 65 72 50 61 73 73 77 ser0...userPassw 0030: 6f 72 64 31 06 04 04 70 61 73 73 ord1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b11 end=0x8920b46 len=53 0000: 00 06 04 04 55 73 65 72 30 13 04 09 67 69 76 65 ....User0...give 0010: 6e 4e 61 6d 65 31 06 04 04 55 73 65 72 30 16 04 nName1...User0.. 0020: 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 .userPassword1.. 0030: 04 70 61 73 73 .pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b19 end=0x8920b46 len=45 0000: 30 13 04 09 67 69 76 65 6e 4e 61 6d 65 31 06 04 0...givenName1.. 0010: 04 55 73 65 72 30 16 04 0c 75 73 65 72 50 61 73 .User0...userPas 0020: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b26 end=0x8920b46 len=32 0000: 00 06 04 04 55 73 65 72 30 16 04 0c 75 73 65 72 ....User0...user 0010: 50 61 73 73 77 6f 72 64 31 06 04 04 70 61 73 73 Password1...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b2e end=0x8920b46 len=24 0000: 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 0...userPassword 0010: 31 06 04 04 70 61 73 73 1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b3e end=0x8920b46 len=8 0000: 00 06 04 04 70 61 73 73 ....pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b46 end=0x8920b46 len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b46 len=131 0000: 64 81 80 04 13 63 6e 3d 55 73 65 72 2c 6f 3d 64 d....cn=User,o=d 0010: 65 2c 64 63 3d 67 61 63 00 69 30 1e 04 0b 6f 62 e,dc=gac.i0...ob 0020: 6a 65 63 74 43 6c 61 73 73 00 0f 04 0d 69 6e 65 jectClass....ine 0030: 74 4f 72 67 50 65 72 73 6f 6e 30 0c 04 02 63 6e tOrgPerson0...cn 0040: 00 06 04 04 55 73 65 72 30 0c 04 02 73 6e 00 06 ....User0...sn.. 0050: 04 04 55 73 65 72 30 13 04 09 67 69 76 65 6e 4e ..User0...givenN 0060: 61 6d 65 00 06 04 04 55 73 65 72 30 16 04 0c 75 ame....User0...u 0070: 73 65 72 50 61 73 73 77 6f 72 64 00 06 04 04 70 serPassword....p 0080: 61 73 73 ass => send_search_entry: conn 3 dn="cn=User,o=de,dc=gac" => access_allowed: read access to "cn=User,o=de,dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr entry => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User,o=de,dc=gac" "objectClass" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr objectClass => slap_access_allowed: result not in cache (objectClass) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "objectClass" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User,o=de,dc=gac" "cn" requested => dn: [1] => acl_get: [3] attr cn => slap_access_allowed: result not in cache (cn) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "cn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User,o=de,dc=gac" "sn" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => acl_get: [4] attr sn => slap_access_allowed: result not in cache (sn) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "sn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: self <= check a_set_pat: [cn=contacts,cn=$1,o=$2,dc=gac]/member => acl_string_expand: pattern: [cn=contacts,cn=$1,o=$2,dc=gac]/member => acl_string_expand: expanded: [cn=contacts,cn=user,o=de,dc=gac]/member >>> dnNormalize: <cn=contacts,cn=user,o=de,dc=gac> => ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac,0) <= ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=contacts,cn=user,o=de,dc=gac)=0 <<< dnNormalize: <cn=contacts,cn=user,o=de,dc=gac> <= check a_dn_pat: * <= acl_mask: [3] applying auth(=xd) (stop) <= acl_mask: [3] mask: auth(=xd) => slap_access_allowed: read access denied by auth(=xd) => access_allowed: no more rules send_search_entry: conn 3 access to attribute sn, value #0 not allowed => access_allowed: read access to "cn=User,o=de,dc=gac" "givenName" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => acl_get: [4] attr givenName => slap_access_allowed: result not in cache (givenName) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "givenName" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: self <= check a_set_pat: [cn=contacts,cn=$1,o=$2,dc=gac]/member => acl_string_expand: pattern: [cn=contacts,cn=$1,o=$2,dc=gac]/member => acl_string_expand: expanded: [cn=contacts,cn=user,o=de,dc=gac]/member >>> dnNormalize: <cn=contacts,cn=user,o=de,dc=gac> => ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac,0) <= ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=contacts,cn=user,o=de,dc=gac)=0 <<< dnNormalize: <cn=contacts,cn=user,o=de,dc=gac> <= check a_dn_pat: * <= acl_mask: [3] applying auth(=xd) (stop) <= acl_mask: [3] mask: auth(=xd) => slap_access_allowed: read access denied by auth(=xd) => access_allowed: no more rules send_search_entry: conn 3 access to attribute givenName, value #0 not allowed => access_allowed: read access to "cn=User,o=de,dc=gac" "userPassword" requested => dn: [1] => acl_get: [2] attr userPassword => slap_access_allowed: result not in cache (userPassword) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "userPassword" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: cn=datadmin,dc=gac <= check a_dn_pat: * <= acl_mask: [2] applying auth(=xd) (stop) <= acl_mask: [2] mask: auth(=xd) => slap_access_allowed: read access denied by auth(=xd) => access_allowed: no more rules send_search_entry: conn 3 access to attribute userPassword, value #0 not allowed ber_flush2: 76 bytes to sd 11 0000: 30 4a 02 01 03 64 45 04 13 63 6e 3d 55 73 65 72 0J...dE..cn=User 0010: 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 2e 30 1e ,o=de,dc=gac0.0. 0020: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 ..objectClass1.. 0030: 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0c .inetOrgPerson0. 0040: 04 02 63 6e 31 06 04 04 55 73 65 72 ..cn1...User sasl_write: want=96, written=96 0000: 00 00 00 5c 83 c6 63 35 c7 67 8b fa d8 28 bd db ...\..c5.g...(.. 0010: 48 09 37 6e ca 1c 8e b7 c6 09 d3 e9 21 3c 86 a2 H.7n........!<.. 0020: 2f bd 2d 46 68 ae b7 54 5d 29 47 56 09 b0 47 43 /.-Fh..T])GV..GC 0030: 6c f5 e3 f3 6e 4c 2f 54 9f 5a 7d ac 0d 54 6d 1d l...nL/T.Z}..Tm. 0040: bb e1 46 c4 26 1f 30 7e 8c 45 16 e0 66 91 3d 9c ..F.&.0~.E..f.=. 0050: 44 c3 e3 1e a5 bf 62 93 ee 46 00 01 00 00 00 00 D.....b..F...... ldap_write: want=76, written=76 0000: 30 4a 02 01 03 64 45 04 13 63 6e 3d 55 73 65 72 0J...dE..cn=User 0010: 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 2e 30 1e ,o=de,dc=gac0.0. 0020: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 ..objectClass1.. 0030: 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0c .inetOrgPerson0. 0040: 04 02 63 6e 31 06 04 04 55 73 65 72 ..cn1...User conn=3 op=2 ENTRY dn="cn=user,o=de,dc=gac" <= send_search_entry: conn 3 exit. ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 9d .... sasl_read: want=157, got=157 0000: a4 f4 34 99 30 66 35 e2 21 a3 ee 0d e3 2e 5c fd ..4.0f5.!.....\. 0010: 63 81 96 e0 1e 06 e3 11 8c 51 3c 76 6a 3d 32 bd c........Q<vj=2. 0020: 84 4d 6a fe 8c 53 fd 9c c9 b5 29 51 ea 7c c7 24 .Mj..S....)Q.|.$ 0030: 4d ca fe 7d 91 47 5e 95 6b 39 d5 c3 2b 47 ab 5b M..}.G^.k9..+G.[ 0040: f6 c7 b4 af 75 ca 6c 6a fb fc 84 78 c2 d4 25 4b ....u.lj...x..%K 0050: 32 ea ea 5c 2f 79 61 5d 72 69 2a 3f 72 1f f6 07 2..\/ya]ri*?r... 0060: 80 22 8b b9 4f c6 94 58 b2 a1 cd 2c c7 cc bc 30 ."..O..X...,...0 0070: 86 73 90 62 35 93 c2 b4 60 b2 cf 2a 7d 8f db e6 .s.b5...`..*}... 0080: 01 f9 88 e7 a5 81 a3 d0 6d 93 24 08 a2 27 68 f1 ........m.$..'h. 0090: b6 f8 d4 84 73 92 17 00 01 00 00 00 03 ....s........ ldap_read: want=8, got=8 0000: 30 81 8a 02 01 03 64 81 0.....d. ldap_read: want=133, got=133 0000: 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d 64 65 ...cn=User2,o=de 0010: 2c 64 63 3d 67 61 63 30 6c 30 1e 04 0b 6f 62 6a ,dc=gac0l0...obj 0020: 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e 65 74 ectClass1...inet 0030: 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 6e 31 OrgPerson0...cn1 0040: 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e 31 07 ...User20...sn1. 0050: 04 05 55 73 65 72 32 30 14 04 09 67 69 76 65 6e ..User20...given 0060: 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 16 04 Name1...User20.. 0070: 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 .userPassword1.. 0080: 04 70 61 73 73 .pass ber_get_next: tag 0x30 len 138 contents: ber_dump: buf=0x8920ac0 ptr=0x8920ac0 end=0x8920b4a len=138 0000: 02 01 03 64 81 84 04 14 63 6e 3d 55 73 65 72 32 ...d....cn=User2 0010: 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 6c 30 1e ,o=de,dc=gac0l0. 0020: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 ..objectClass1.. 0030: 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d .inetOrgPerson0. 0040: 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0d 04 ..cn1...User20.. 0050: 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 04 09 .sn1...User20... 0060: 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 givenName1...Use 0070: 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f r20...userPasswo 0080: 72 64 31 06 04 04 70 61 73 73 rd1...pass read1msg: ld 0x88f5380 msgid 3 message type search-entry ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b4a len=135 0000: 64 81 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d d....cn=User2,o= 0010: 64 65 2c 64 63 3d 67 61 63 30 6c 30 1e 04 0b 6f de,dc=gac0l0...o 0020: 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e bjectClass1...in 0030: 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 etOrgPerson0...c 0040: 6e 31 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e n1...User20...sn 0050: 31 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 1...User20...giv 0060: 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 enName1...User20 0070: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 ...userPassword1 0080: 06 04 04 70 61 73 73 ...pass [rw] searchResult: "cn=User2,o=de,dc=gac" -> "cn=User2,o=de,dc=gac" >>> dnPrettyNormal: <cn=User2,o=de,dc=gac> => ldap_bv2dn(cn=User2,o=de,dc=gac,0) <= ldap_bv2dn(cn=User2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=User2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnPrettyNormal: <cn=User2,o=de,dc=gac>, <cn=user2,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ade end=0x8920b4a len=108 0000: 30 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e ...inetOrgPerson 0020: 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0...cn1...User20 0030: 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 ...sn1...User20. 0040: 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 ..givenName1...U 0050: 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 ser20...userPass 0060: 77 6f 72 64 31 06 04 04 70 61 73 73 word1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920aed end=0x8920b4a len=93 0000: 00 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f ....inetOrgPerso 0010: 6e 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 n0...cn1...User2 0020: 30 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 0...sn1...User20 0030: 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 ...givenName1... 0040: 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 User20...userPas 0050: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920afe end=0x8920b4a len=76 0000: 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0...cn1...User20 0010: 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 ...sn1...User20. 0020: 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 ..givenName1...U 0030: 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 ser20...userPass 0040: 77 6f 72 64 31 06 04 04 70 61 73 73 word1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b04 end=0x8920b4a len=70 0000: 00 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e 31 ....User20...sn1 0010: 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 65 ...User20...give 0020: 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 16 nName1...User20. 0030: 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 ..userPassword1. 0040: 04 04 70 61 73 73 ..pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b0d end=0x8920b4a len=61 0000: 30 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 0...sn1...User20 0010: 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 ...givenName1... 0020: 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 User20...userPas 0030: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b13 end=0x8920b4a len=55 0000: 00 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 ....User20...giv 0010: 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 enName1...User20 0020: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 ...userPassword1 0030: 06 04 04 70 61 73 73 ...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b1c end=0x8920b4a len=46 0000: 30 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 0...givenName1.. 0010: 05 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 .User20...userPa 0020: 73 73 77 6f 72 64 31 06 04 04 70 61 73 73 ssword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b29 end=0x8920b4a len=33 0000: 00 07 04 05 55 73 65 72 32 30 16 04 0c 75 73 65 ....User20...use 0010: 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 61 73 rPassword1...pas 0020: 73 s ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b32 end=0x8920b4a len=24 0000: 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 0...userPassword 0010: 31 06 04 04 70 61 73 73 1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b42 end=0x8920b4a len=8 0000: 00 06 04 04 70 61 73 73 ....pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b4a end=0x8920b4a len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b4a len=135 0000: 64 81 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d d....cn=User2,o= 0010: 64 65 2c 64 63 3d 67 61 63 00 6c 30 1e 04 0b 6f de,dc=gac.l0...o 0020: 62 6a 65 63 74 43 6c 61 73 73 00 0f 04 0d 69 6e bjectClass....in 0030: 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 etOrgPerson0...c 0040: 6e 00 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e n....User20...sn 0050: 00 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 ....User20...giv 0060: 65 6e 4e 61 6d 65 00 07 04 05 55 73 65 72 32 30 enName....User20 0070: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 00 ...userPassword. 0080: 06 04 04 70 61 73 73 ...pass => send_search_entry: conn 3 dn="cn=User2,o=de,dc=gac" => access_allowed: read access to "cn=User2,o=de,dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr entry => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "objectClass" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr objectClass => slap_access_allowed: result not in cache (objectClass) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "objectClass" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "cn" requested => dn: [1] => acl_get: [3] attr cn => slap_access_allowed: result not in cache (cn) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "cn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "sn" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => acl_get: [4] attr sn => slap_access_allowed: result not in cache (sn) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "sn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: self <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "givenName" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => acl_get: [4] attr givenName => slap_access_allowed: result not in cache (givenName) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "givenName" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: self <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "userPassword" requested => dn: [1] => acl_get: [2] attr userPassword => slap_access_allowed: result not in cache (userPassword) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "userPassword" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: cn=datadmin,dc=gac <= check a_dn_pat: * <= acl_mask: [2] applying auth(=xd) (stop) <= acl_mask: [2] mask: auth(=xd) => slap_access_allowed: read access denied by auth(=xd) => access_allowed: no more rules send_search_entry: conn 3 access to attribute userPassword, value #0 not allowed ber_flush2: 115 bytes to sd 11 0000: 30 71 02 01 03 64 6c 04 14 63 6e 3d 55 73 65 72 0q...dl..cn=User 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 54 30 2,o=de,dc=gac0T0 0020: 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f ...objectClass1. 0030: 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 ..inetOrgPerson0 0040: 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0d ...cn1...User20. 0050: 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 04 ..sn1...User20.. 0060: 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 73 .givenName1...Us 0070: 65 72 32 er2 sasl_write: want=135, written=135 0000: 00 00 00 83 4a 39 19 4f 93 38 d0 77 d0 bb 08 7f ....J9.O.8.w.... 0010: 49 18 1c 59 d7 a5 a3 ca b2 dd 90 83 5f fe 1d 0f I..Y........_... 0020: bc 35 66 33 a0 7b d3 01 02 70 3a 19 8e af 7c 7d .5f3.{...p:...|} 0030: 8b 79 7e 27 8e 4d f5 61 65 36 6a df ee 0a 8e 62 .y~'.M.ae6j....b 0040: 18 6e e7 75 1d 22 b7 98 3d 63 0a 29 e5 63 6f e5 .n.u."..=c.).co. 0050: 77 97 ef 02 65 d2 3e 7d da 21 24 d8 42 d5 86 39 w...e.>}.!$.B..9 0060: dc f6 79 f3 b5 bd 42 c3 90 f1 8d c8 da bc 68 99 ..y...B.......h. 0070: b0 88 7c 1f cf b6 93 18 8d f4 af 65 e5 57 98 8b ..|........e.W.. 0080: 13 00 01 00 00 00 01 ....... ldap_write: want=115, written=115 0000: 30 71 02 01 03 64 6c 04 14 63 6e 3d 55 73 65 72 0q...dl..cn=User 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 54 30 2,o=de,dc=gac0T0 0020: 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f ...objectClass1. 0030: 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 ..inetOrgPerson0 0040: 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0d ...cn1...User20. 0050: 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 04 ..sn1...User20.. 0060: 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 73 .givenName1...Us 0070: 65 72 32 er2 conn=3 op=2 ENTRY dn="cn=user2,o=de,dc=gac" <= send_search_entry: conn 3 exit. ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 8d .... sasl_read: want=141, got=141 0000: f4 db 84 c1 97 c3 cb 7b cd b0 23 ed 24 6b 4e 4d .......{..#.$kNM 0010: 61 83 7b 94 17 4e f6 e3 df 53 aa bb e6 f4 b2 b1 a.{..N...S...... 0020: 0d d6 7e 75 33 9a ed 9d 87 af c4 f8 66 66 de 7e ..~u3.......ff.~ 0030: c8 e8 58 c7 9e c2 eb 0c 74 53 eb b2 56 8c 20 90 ..X.....tS..V. . 0040: dd 3d cb 16 f8 bd db a0 6d 3a 3e cf f5 f2 05 4d .=......m:>....M 0050: 61 cc 11 9f 3c 83 57 cd 08 95 2c 1e 0d 8e 05 74 a...<.W...,....t 0060: 02 90 00 e8 ec db 36 ac 17 01 dd 2a 78 c4 72 57 ......6....*x.rW 0070: 7b 30 4b a5 90 93 e3 c8 74 20 4f 2a 4a 86 24 89 {0K.....t O*J.$. 0080: 45 a9 0b 19 28 52 96 00 01 00 00 00 04 E...(R....... ldap_read: want=8, got=8 0000: 30 7b 02 01 03 64 76 04 0{...dv. ldap_read: want=117, got=117 0000: 1f 63 6e 3d 63 6f 6e 74 61 63 74 73 2c 63 6e 3d .cn=contacts,cn= 0010: 75 73 65 72 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 user,o=de,dc=gac 0020: 30 53 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 0S0...objectClas 0030: 73 31 0e 04 0c 67 72 6f 75 70 4f 66 4e 61 6d 65 s1...groupOfName 0040: 73 30 10 04 02 63 6e 31 0a 04 08 63 6f 6e 74 61 s0...cn1...conta 0050: 63 74 73 30 20 04 06 6d 65 6d 62 65 72 31 16 04 cts0 ..member1.. 0060: 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 .cn=user2,o=de,d 0070: 63 3d 67 61 63 c=gac ber_get_next: tag 0x30 len 123 contents: ber_dump: buf=0x8920ac0 ptr=0x8920ac0 end=0x8920b3b len=123 0000: 02 01 03 64 76 04 1f 63 6e 3d 63 6f 6e 74 61 63 ...dv..cn=contac 0010: 74 73 2c 63 6e 3d 75 73 65 72 2c 6f 3d 64 65 2c ts,cn=user,o=de, 0020: 64 63 3d 67 61 63 30 53 30 1d 04 0b 6f 62 6a 65 dc=gac0S0...obje 0030: 63 74 43 6c 61 73 73 31 0e 04 0c 67 72 6f 75 70 ctClass1...group 0040: 4f 66 4e 61 6d 65 73 30 10 04 02 63 6e 31 0a 04 OfNames0...cn1.. 0050: 08 63 6f 6e 74 61 63 74 73 30 20 04 06 6d 65 6d .contacts0 ..mem 0060: 62 65 72 31 16 04 14 63 6e 3d 75 73 65 72 32 2c ber1...cn=user2, 0070: 6f 3d 64 65 2c 64 63 3d 67 61 63 o=de,dc=gac read1msg: ld 0x88f5380 msgid 3 message type search-entry ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b3b len=120 0000: 64 76 04 1f 63 6e 3d 63 6f 6e 74 61 63 74 73 2c dv..cn=contacts, 0010: 63 6e 3d 75 73 65 72 2c 6f 3d 64 65 2c 64 63 3d cn=user,o=de,dc= 0020: 67 61 63 30 53 30 1d 04 0b 6f 62 6a 65 63 74 43 gac0S0...objectC 0030: 6c 61 73 73 31 0e 04 0c 67 72 6f 75 70 4f 66 4e lass1...groupOfN 0040: 61 6d 65 73 30 10 04 02 63 6e 31 0a 04 08 63 6f ames0...cn1...co 0050: 6e 74 61 63 74 73 30 20 04 06 6d 65 6d 62 65 72 ntacts0 ..member 0060: 31 16 04 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 1...cn=user2,o=d 0070: 65 2c 64 63 3d 67 61 63 e,dc=gac [rw] searchResult: "cn=contacts,cn=user,o=de,dc=gac" -> "cn=contacts,cn=user,o=de,dc=gac" >>> dnPrettyNormal: <cn=contacts,cn=user,o=de,dc=gac> => ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac,0) <= ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=contacts,cn=user,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=contacts,cn=user,o=de,dc=gac)=0 <<< dnPrettyNormal: <cn=contacts,cn=user,o=de,dc=gac>, <cn=contacts,cn=user,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ae8 end=0x8920b3b len=83 0000: 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0e 04 0c 67 72 6f 75 70 4f 66 4e 61 6d 65 73 30 ...groupOfNames0 0020: 10 04 02 63 6e 31 0a 04 08 63 6f 6e 74 61 63 74 ...cn1...contact 0030: 73 30 20 04 06 6d 65 6d 62 65 72 31 16 04 14 63 s0 ..member1...c 0040: 6e 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 63 3d n=user2,o=de,dc= 0050: 67 61 63 gac ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920af7 end=0x8920b3b len=68 0000: 00 0e 04 0c 67 72 6f 75 70 4f 66 4e 61 6d 65 73 ....groupOfNames 0010: 30 10 04 02 63 6e 31 0a 04 08 63 6f 6e 74 61 63 0...cn1...contac 0020: 74 73 30 20 04 06 6d 65 6d 62 65 72 31 16 04 14 ts0 ..member1... 0030: 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 63 cn=user2,o=de,dc 0040: 3d 67 61 63 =gac ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b07 end=0x8920b3b len=52 0000: 30 10 04 02 63 6e 31 0a 04 08 63 6f 6e 74 61 63 0...cn1...contac 0010: 74 73 30 20 04 06 6d 65 6d 62 65 72 31 16 04 14 ts0 ..member1... 0020: 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 63 cn=user2,o=de,dc 0030: 3d 67 61 63 =gac ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b0d end=0x8920b3b len=46 0000: 00 0a 04 08 63 6f 6e 74 61 63 74 73 30 20 04 06 ....contacts0 .. 0010: 6d 65 6d 62 65 72 31 16 04 14 63 6e 3d 75 73 65 member1...cn=use 0020: 72 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 r2,o=de,dc=gac ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b19 end=0x8920b3b len=34 0000: 30 20 04 06 6d 65 6d 62 65 72 31 16 04 14 63 6e 0 ..member1...cn 0010: 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 63 3d 67 =user2,o=de,dc=g 0020: 61 63 ac ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b23 end=0x8920b3b len=24 0000: 00 16 04 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 ....cn=user2,o=d 0010: 65 2c 64 63 3d 67 61 63 e,dc=gac [rw] searchAttrDN: "cn=user2,o=de,dc=gac" -> "cn=user2,o=de,dc=gac" >>> dnPretty: <cn=user2,o=de,dc=gac> => ldap_bv2dn(cn=user2,o=de,dc=gac,0) <= ldap_bv2dn(cn=user2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnPretty: <cn=user2,o=de,dc=gac> >>> dnNormalize: <cn=user2,o=de,dc=gac> => ldap_bv2dn(cn=user2,o=de,dc=gac,0) <= ldap_bv2dn(cn=user2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnNormalize: <cn=user2,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b3b end=0x8920b3b len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b3b len=120 0000: 64 76 04 1f 63 6e 3d 63 6f 6e 74 61 63 74 73 2c dv..cn=contacts, 0010: 63 6e 3d 75 73 65 72 2c 6f 3d 64 65 2c 64 63 3d cn=user,o=de,dc= 0020: 67 61 63 00 53 30 1d 04 0b 6f 62 6a 65 63 74 43 gac.S0...objectC 0030: 6c 61 73 73 00 0e 04 0c 67 72 6f 75 70 4f 66 4e lass....groupOfN 0040: 61 6d 65 73 30 10 04 02 63 6e 00 0a 04 08 63 6f ames0...cn....co 0050: 6e 74 61 63 74 73 30 20 04 06 6d 65 6d 62 65 72 ntacts0 ..member 0060: 00 16 04 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 ....cn=user2,o=d 0070: 65 2c 64 63 3d 67 61 63 e,dc=gac => send_search_entry: conn 3 dn="cn=contacts,cn=user,o=de,dc=gac" => access_allowed: read access to "cn=contacts,cn=user,o=de,dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr entry => match[0]: 12 31 cn=user,o=de,dc=gac => match[1]: 15 19 user => match[2]: 22 24 de => acl_mask: access to entry "cn=contacts,cn=user,o=de,dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=contacts,cn=user,o=de,dc=gac" "objectClass" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr objectClass => match[0]: 12 31 cn=user,o=de,dc=gac => match[1]: 15 19 user => match[2]: 22 24 de => slap_access_allowed: result not in cache (objectClass) => acl_mask: access to entry "cn=contacts,cn=user,o=de,dc=gac", attr "objectClass" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=contacts,cn=user,o=de,dc=gac" "cn" requested => dn: [1] => acl_get: [3] attr cn => slap_access_allowed: result not in cache (cn) => acl_mask: access to entry "cn=contacts,cn=user,o=de,dc=gac", attr "cn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=contacts,cn=user,o=de,dc=gac" "member" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr member => match[0]: 12 31 cn=user,o=de,dc=gac => match[1]: 15 19 user => match[2]: 22 24 de => slap_access_allowed: result not in cache (member) => acl_mask: access to entry "cn=contacts,cn=user,o=de,dc=gac", attr "member" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) ber_flush2: 125 bytes to sd 11 0000: 30 7b 02 01 03 64 76 04 1f 63 6e 3d 63 6f 6e 74 0{...dv..cn=cont 0010: 61 63 74 73 2c 63 6e 3d 75 73 65 72 2c 6f 3d 64 acts,cn=user,o=d 0020: 65 2c 64 63 3d 67 61 63 30 53 30 1d 04 0b 6f 62 e,dc=gac0S0...ob 0030: 6a 65 63 74 43 6c 61 73 73 31 0e 04 0c 67 72 6f jectClass1...gro 0040: 75 70 4f 66 4e 61 6d 65 73 30 10 04 02 63 6e 31 upOfNames0...cn1 0050: 0a 04 08 63 6f 6e 74 61 63 74 73 30 20 04 06 6d ...contacts0 ..m 0060: 65 6d 62 65 72 31 16 04 14 63 6e 3d 75 73 65 72 ember1...cn=user 0070: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 2,o=de,dc=gac sasl_write: want=145, written=145 0000: 00 00 00 8d ee 90 f3 ed 59 ee b5 ec 5f ae 3e aa ........Y..._.>. 0010: de 12 bf a5 11 0c 1d 9c 66 04 f6 0e ed e0 31 f2 ........f.....1. 0020: 69 e7 93 6a 77 87 e6 25 8b ba 32 92 e1 6a f0 ec i..jw..%..2..j.. 0030: 6a 64 5c 9e be c0 f2 0e 5e 12 9d 68 0f c2 4e 06 jd\.....^..h..N. 0040: fd 22 ee 71 ee 9f 28 85 92 75 87 72 a8 29 23 39 .".q..(..u.r.)#9 0050: 73 93 ed 45 f3 97 48 64 fe 8d 5d a0 a3 22 62 9f s..E..Hd..].."b. 0060: 21 25 e0 3b 09 1c c3 83 94 8b 42 7d 2a 20 51 3c !%.;......B}* Q< 0070: 69 11 74 cd 5e d5 e3 24 22 d5 5d 3a b1 79 df cb i.t.^..$".]:.y.. 0080: 1b cb 37 c4 09 ef ac 8c 34 78 02 00 01 00 00 00 ..7.....4x...... 0090: 02 . ldap_write: want=125, written=125 0000: 30 7b 02 01 03 64 76 04 1f 63 6e 3d 63 6f 6e 74 0{...dv..cn=cont 0010: 61 63 74 73 2c 63 6e 3d 75 73 65 72 2c 6f 3d 64 acts,cn=user,o=d 0020: 65 2c 64 63 3d 67 61 63 30 53 30 1d 04 0b 6f 62 e,dc=gac0S0...ob 0030: 6a 65 63 74 43 6c 61 73 73 31 0e 04 0c 67 72 6f jectClass1...gro 0040: 75 70 4f 66 4e 61 6d 65 73 30 10 04 02 63 6e 31 upOfNames0...cn1 0050: 0a 04 08 63 6f 6e 74 61 63 74 73 30 20 04 06 6d ...contacts0 ..m 0060: 65 6d 62 65 72 31 16 04 14 63 6e 3d 75 73 65 72 ember1...cn=user 0070: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 2,o=de,dc=gac conn=3 op=2 ENTRY dn="cn=contacts,cn=user,o=de,dc=gac" <= send_search_entry: conn 3 exit. ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 1e .... sasl_read: want=30, got=30 0000: e6 89 1d 0c cb fc a4 1b d5 c0 5e cb 22 a0 24 0f ..........^.".$. 0010: e8 02 b2 bf d3 3e 8c a9 00 01 00 00 00 05 .....>........ ldap_read: want=8, got=8 0000: 30 0c 02 01 03 65 07 0a 0....e.. ldap_read: want=6, got=6 0000: 01 00 04 00 04 00 ...... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x8920b50 ptr=0x8920b50 end=0x8920b5c len=12 0000: 02 01 03 65 07 0a 01 00 04 00 04 00 ...e........ read1msg: ld 0x88f5380 msgid 3 message type search-result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x8920b50 ptr=0x8920b53 end=0x8920b5c len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ read1msg: ld 0x88f5380 0 new referrals read1msg: mark request completed, ld 0x88f5380 msgid 3 request done: ld 0x88f5380 msgid 3 res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 3, msgid 3) ldap_free_connection 0 1 ldap_free_connection: refcnt 1 ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x8920b50 ptr=0x8920b53 end=0x8920b5c len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ ber_scanf fmt (}) ber: ber_dump: buf=0x8920b50 ptr=0x8920b5c end=0x8920b5c len=0 conn=3 op=2 meta_back_search[0] match="" err=0. ldap_msgfree send_ldap_result: conn=3 op=2 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=3 tag=101 err=0 ber_flush2: 14 bytes to sd 11 0000: 30 0c 02 01 03 65 07 0a 01 00 04 00 04 00 0....e........ sasl_write: want=34, written=34 0000: 00 00 00 1e e8 3c 38 df 4b 1c ec fb 55 92 5c 6f .....<8.K...U.\o 0010: 44 b1 7f d4 f6 72 9f 5c 9b ff e3 48 00 01 00 00 D....r.\...H.... 0020: 00 03 .. ldap_write: want=14, written=14 0000: 30 0c 02 01 03 65 07 0a 01 00 04 00 04 00 0....e........ conn=3 op=2 SEARCH RESULT tag=101 err=0 nentries=3 text= daemon: activity on 1 descriptor daemon: activity on: 11r daemon: read active on 11 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(11) connection_get(11): got connid=3 connection_read(11): checking for input on id=3 ber_get_next sasl_read: want=4, got=0 ldap_read: want=8, got=0 ber_get_next on fd 11 failed errno=0 (Success) connection_read(11): input error=-2 id=3, closing. connection_closing: readying conn=3 sd=11 for close connection_close: conn=3 sd=11 =>meta_back_conn_destroy: fetching conn=3 DN="cn=user2,o=de,dc=gac" =>meta_back_conn_destroy: destroying conn 3 refcnt=0 flags=0x00000100 ldap_free_connection 1 1 ldap_send_unbind ber_flush2: 7 bytes to sd 13 0000: 30 05 02 01 04 42 00 0....B. sasl_write: want=27, written=27 0000: 00 00 00 17 f0 4f 68 14 67 7c 34 5e 9f 47 43 50 .....Oh.g|4^.GCP 0010: 42 3e 0f 96 ca 00 01 00 00 00 01 B>......... ldap_write: want=7, written=7 0000: 30 05 02 01 04 42 00 0....B. ldap_free_connection: actually freed daemon: removing 11 conn=3 fd=11 closed (connection lost) daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL Target-Log daemon: activity on: slap_listener_activate(8): >>> slap_listener(ldap:///) daemon: listen=8, new connection on 11 daemon: added 11r (active) listener=(nil) conn=3 fd=11 ACCEPT from IP=192.168.112.12:42372 (IP=0.0.0.0:389) daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL daemon: activity on 1 descriptor daemon: activity on: 11r daemon: read active on 11 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(11) connection_get(11): got connid=3 connection_read(11): checking for input on id=3 ber_get_next ldap_read: want=8, got=8 0000: 30 18 02 01 01 60 13 02 0....`.. ldap_read: want=18, got=18 0000: 01 03 04 00 a3 0c 04 0a 44 49 47 45 53 54 2d 4d ........DIGEST-M 0010: 44 35 D5 ber_get_next: tag 0x30 len 24 contents: ber_dump: buf=0x88ede60 ptr=0x88ede60 end=0x88ede78 len=24 0000: 02 01 01 60 13 02 01 03 04 00 a3 0c 04 0a 44 49 ...`..........DI 0010: 47 45 53 54 2d 4d 44 35 GEST-MD5 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable conn=3 op=0 do_bind ber_scanf fmt ({imt) ber: ber_dump: buf=0x88ede60 ptr=0x88ede63 end=0x88ede78 len=21 0000: 60 13 02 01 03 04 00 a3 0c 04 0a 44 49 47 45 53 `..........DIGES 0010: 54 2d 4d 44 35 T-MD5 ber_scanf fmt ({m) ber: ber_dump: buf=0x88ede60 ptr=0x88ede6a end=0x88ede78 len=14 0000: 00 0c 04 0a 44 49 47 45 53 54 2d 4d 44 35 ....DIGEST-MD5 ber_scanf fmt (}}) ber: ber_dump: buf=0x88ede60 ptr=0x88ede78 end=0x88ede78 len=0 >>> dnPrettyNormal: <> <<< dnPrettyNormal: <>, <> conn=3 op=0 BIND dn="" method=163 do_bind: dn () SASL mech DIGEST-MD5 ==> sasl_bind: dn="" mech=DIGEST-MD5 datalen=0 SASL [conn=3] Debug: DIGEST-MD5 server step 1 send_ldap_sasl: err=14 len=181 send_ldap_response: msgid=1 tag=97 err=14 ber_flush2: 228 bytes to sd 11 0000: 30 81 e1 02 01 01 61 81 db 0a 01 0e 04 00 04 1c 0.....a......... 0010: 53 41 53 4c 28 30 29 3a 20 73 75 63 63 65 73 73 SASL(0): success 0020: 66 75 6c 20 72 65 73 75 6c 74 3a 20 87 81 b5 6e ful result: ...n 0030: 6f 6e 63 65 3d 22 52 47 42 34 2f 6e 6a 7a 43 4b once="RGB4/njzCK 0040: 65 42 59 38 62 36 35 69 77 48 70 47 77 64 6e 37 eBY8b65iwHpGwdn7 0050: 64 4b 31 34 55 77 6f 5a 6a 62 6f 49 7a 70 5a 4d dK14UwoZjboIzpZM 0060: 45 3d 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e E=",realm="node. 0070: 67 61 63 22 2c 71 6f 70 3d 22 61 75 74 68 2c 61 gac",qop="auth,a 0080: 75 74 68 2d 69 6e 74 2c 61 75 74 68 2d 63 6f 6e uth-int,auth-con 0090: 66 22 2c 63 69 70 68 65 72 3d 22 72 63 34 2d 34 f",cipher="rc4-4 00a0: 30 2c 72 63 34 2d 35 36 2c 72 63 34 2c 64 65 73 0,rc4-56,rc4,des 00b0: 2c 33 64 65 73 22 2c 6d 61 78 62 75 66 3d 36 35 ,3des",maxbuf=65 00c0: 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 66 2d 536,charset=utf- 00d0: 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 8,algorithm=md5- 00e0: 73 65 73 73 sess ldap_write: want=228, written=228 0000: 30 81 e1 02 01 01 61 81 db 0a 01 0e 04 00 04 1c 0.....a......... 0010: 53 41 53 4c 28 30 29 3a 20 73 75 63 63 65 73 73 SASL(0): success 0020: 66 75 6c 20 72 65 73 75 6c 74 3a 20 87 81 b5 6e ful result: ...n 0030: 6f 6e 63 65 3d 22 52 47 42 34 2f 6e 6a 7a 43 4b once="RGB4/njzCK 0040: 65 42 59 38 62 36 35 69 77 48 70 47 77 64 6e 37 eBY8b65iwHpGwdn7 0050: 64 4b 31 34 55 77 6f 5a 6a 62 6f 49 7a 70 5a 4d dK14UwoZjboIzpZM 0060: 45 3d 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e E=",realm="node. 0070: 67 61 63 22 2c 71 6f 70 3d 22 61 75 74 68 2c 61 gac",qop="auth,a 0080: 75 74 68 2d 69 6e 74 2c 61 75 74 68 2d 63 6f 6e uth-int,auth-con 0090: 66 22 2c 63 69 70 68 65 72 3d 22 72 63 34 2d 34 f",cipher="rc4-4 00a0: 30 2c 72 63 34 2d 35 36 2c 72 63 34 2c 64 65 73 0,rc4-56,rc4,des 00b0: 2c 33 64 65 73 22 2c 6d 61 78 62 75 66 3d 36 35 ,3des",maxbuf=65 00c0: 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 66 2d 536,charset=utf- 00d0: 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 8,algorithm=md5- daemon: activity on 1 descriptor 00e0: 73 65 73 73 sess conn=3 op=0 RESULT tag=97 err=14 text=SASL(0): successful result: <== slap_sasl_bind: rc=14 daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL daemon: activity on 1 descriptor daemon: activity on: 11r daemon: read active on 11 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(11) connection_get(11): got connid=3 connection_read(11): checking for input on id=3 ber_get_next ldap_read: want=8, got=8 0000: 30 82 01 29 02 01 02 60 0..)...` ldap_read: want=293, got=293 0000: 82 01 22 02 01 03 04 00 a3 82 01 19 04 0a 44 49 .."...........DI 0010: 47 45 53 54 2d 4d 44 35 04 82 01 09 75 73 65 72 GEST-MD5....user 0020: 6e 61 6d 65 3d 22 75 73 65 72 32 40 64 65 22 2c name="user2@de", 0030: 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 realm="node.gac" 0040: 2c 6e 6f 6e 63 65 3d 22 52 47 42 34 2f 6e 6a 7a ,nonce="RGB4/njz 0050: 43 4b 65 42 59 38 62 36 35 69 77 48 70 47 77 64 CKeBY8b65iwHpGwd 0060: 6e 37 64 4b 31 34 55 77 6f 5a 6a 62 6f 49 7a 70 n7dK14UwoZjboIzp 0070: 5a 4d 45 3d 22 2c 63 6e 6f 6e 63 65 3d 22 7a 32 ZME=",cnonce="z2 0080: 69 6c 2f 6c 32 61 39 77 72 47 73 7a 2b 6b 32 2b il/l2a9wrGsz+k2+ 0090: 59 67 6d 56 46 39 55 4d 72 5a 55 6a 59 6a 70 54 YgmVF9UMrZUjYjpT 00a0: 62 54 56 5a 6f 68 7a 45 67 3d 22 2c 6e 63 3d 30 bTVZohzEg=",nc=0 00b0: 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 68 0000001,qop=auth 00c0: 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 34 -conf,cipher=rc4 00d0: 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 35 ,maxbuf=16777215 00e0: 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 61 ,digest-uri="lda 00f0: 70 2f 6e 6f 64 65 2e 67 61 63 22 2c 72 65 73 70 p/node.gac",resp 0100: 6f 6e 73 65 3d 38 33 35 62 65 33 64 32 62 65 66 onse=835be3d2bef 0110: 30 31 32 34 35 62 66 66 61 33 35 66 30 64 39 39 01245bffa35f0d99 0120: 64 66 32 62 34 df2b4 ber_get_next: tag 0x30 len 297 contents: ber_dump: buf=0x89233e8 ptr=0x89233e8 end=0x8923511 len=297 0000: 02 01 02 60 82 01 22 02 01 03 04 00 a3 82 01 19 ...`.."......... 0010: 04 0a 44 49 47 45 53 54 2d 4d 44 35 04 82 01 09 ..DIGEST-MD5.... 0020: 75 73 65 72 6e 61 6d 65 3d 22 75 73 65 72 32 40 username="user2@ 0030: 64 65 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e de",realm="node. 0040: 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 52 47 42 34 gac",nonce="RGB4 0050: 2f 6e 6a 7a 43 4b 65 42 59 38 62 36 35 69 77 48 /njzCKeBY8b65iwH 0060: 70 47 77 64 6e 37 64 4b 31 34 55 77 6f 5a 6a 62 pGwdn7dK14UwoZjb 0070: 6f 49 7a 70 5a 4d 45 3d 22 2c 63 6e 6f 6e 63 65 oIzpZME=",cnonce 0080: 3d 22 7a 32 69 6c 2f 6c 32 61 39 77 72 47 73 7a ="z2il/l2a9wrGsz 0090: 2b 6b 32 2b 59 67 6d 56 46 39 55 4d 72 5a 55 6a +k2+YgmVF9UMrZUj 00a0: 59 6a 70 54 62 54 56 5a 6f 68 7a 45 67 3d 22 2c YjpTbTVZohzEg=", 00b0: 6e 63 3d 30 30 30 30 30 30 30 31 2c 71 6f 70 3d nc=00000001,qop= 00c0: 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 auth-conf,cipher 00d0: 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 =rc4,maxbuf=1677 00e0: 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 7215,digest-uri= 00f0: 22 6c 64 61 70 2f 6e 6f 64 65 2e 67 61 63 22 2c "ldap/node.gac", 0100: 72 65 73 70 6f 6e 73 65 3d 38 33 35 62 65 33 64 response=835be3d 0110: 32 62 65 66 30 31 32 34 35 62 66 66 61 33 35 66 2bef01245bffa35f 0120: 30 64 39 39 64 66 32 62 34 0d99df2b4 ber_get_next ldap_read: want=8 error=Resource temporarily unavailable conn=3 op=1 do_bind ber_scanf fmt ({imt) ber: ber_dump: buf=0x89233e8 ptr=0x89233eb end=0x8923511 len=294 daemon: activity on 1 descriptor 0000: 60 82 01 22 02 01 03 04 00 a3 82 01 19 04 0a 44 `.."...........D 0010: 49 47 45 53 54 2d 4d 44 35 04 82 01 09 75 73 65 IGEST-MD5....use 0020: 72 6e 61 6d 65 3d 22 75 73 65 72 32 40 64 65 22 rname="user2@de" 0030: 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 ,realm="node.gac 0040: 22 2c 6e 6f 6e 63 65 3d 22 52 47 42 34 2f 6e 6a ",nonce="RGB4/nj 0050: 7a 43 4b 65 42 59 38 62 36 35 69 77 48 70 47 77 zCKeBY8b65iwHpGw 0060: 64 6e 37 64 4b 31 34 55 77 6f 5a 6a 62 6f 49 7a dn7dK14UwoZjboIz 0070: 70 5a 4d 45 3d 22 2c 63 6e 6f 6e 63 65 3d 22 7a pZME=",cnonce="z 0080: 32 69 6c 2f 6c 32 61 39 77 72 47 73 7a 2b 6b 32 2il/l2a9wrGsz+k2 0090: 2b 59 67 6d 56 46 39 55 4d 72 5a 55 6a 59 6a 70 +YgmVF9UMrZUjYjp 00a0: 54 62 54 56 5a 6f 68 7a 45 67 3d 22 2c 6e 63 3d TbTVZohzEg=",nc= 00b0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut 00c0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc 00d0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721 00e0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld 00f0: 61 70 2f 6e 6f 64 65 2e 67 61 63 22 2c 72 65 73 ap/node.gac",res 0100: 70 6f 6e 73 65 3d 38 33 35 62 65 33 64 32 62 65 ponse=835be3d2be 0110: 66 30 31 32 34 35 62 66 66 61 33 35 66 30 64 39 f01245bffa35f0d9 0120: 39 64 66 32 62 34 9df2b4 ber_scanf fmt ({m) ber: ber_dump: buf=0x89233e8 ptr=0x89233f4 end=0x8923511 len=285 0000: 00 82 01 19 04 0a 44 49 47 45 53 54 2d 4d 44 35 ......DIGEST-MD5 0010: 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 75 73 ....username="us 0020: 65 72 32 40 64 65 22 2c 72 65 61 6c 6d 3d 22 6e er2@de",realm="n 0030: 6f 64 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 ode.gac",nonce=" 0040: 52 47 42 34 2f 6e 6a 7a 43 4b 65 42 59 38 62 36 RGB4/njzCKeBY8b6 0050: 35 69 77 48 70 47 77 64 6e 37 64 4b 31 34 55 77 5iwHpGwdn7dK14Uw 0060: 6f 5a 6a 62 6f 49 7a 70 5a 4d 45 3d 22 2c 63 6e oZjboIzpZME=",cn 0070: 6f 6e 63 65 3d 22 7a 32 69 6c 2f 6c 32 61 39 77 once="z2il/l2a9w 0080: 72 47 73 7a 2b 6b 32 2b 59 67 6d 56 46 39 55 4d rGsz+k2+YgmVF9UM 0090: 72 5a 55 6a 59 6a 70 54 62 54 56 5a 6f 68 7a 45 rZUjYjpTbTVZohzE 00a0: 67 3d 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c g=",nc=00000001, 00b0: 71 6f 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 qop=auth-conf,ci 00c0: 70 68 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d pher=rc4,maxbuf= 00d0: 31 36 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 16777215,digest- 00e0: 75 72 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2e 67 uri="ldap/node.g 00f0: 61 63 22 2c 72 65 73 70 6f 6e 73 65 3d 38 33 35 ac",response=835 0100: 62 65 33 64 32 62 65 66 30 31 32 34 35 62 66 66 be3d2bef01245bff 0110: 61 33 35 66 30 64 39 39 64 66 32 62 34 a35f0d99df2b4 ber_scanf fmt (m) ber: ber_dump: buf=0x89233e8 ptr=0x8923404 end=0x8923511 len=269 0000: 00 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 75 73 ....username="us 0010: 65 72 32 40 64 65 22 2c 72 65 61 6c 6d 3d 22 6e er2@de",realm="n 0020: 6f 64 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 ode.gac",nonce=" 0030: 52 47 42 34 2f 6e 6a 7a 43 4b 65 42 59 38 62 36 RGB4/njzCKeBY8b6 0040: 35 69 77 48 70 47 77 64 6e 37 64 4b 31 34 55 77 5iwHpGwdn7dK14Uw 0050: 6f 5a 6a 62 6f 49 7a 70 5a 4d 45 3d 22 2c 63 6e oZjboIzpZME=",cn 0060: 6f 6e 63 65 3d 22 7a 32 69 6c 2f 6c 32 61 39 77 once="z2il/l2a9w 0070: 72 47 73 7a 2b 6b 32 2b 59 67 6d 56 46 39 55 4d rGsz+k2+YgmVF9UM 0080: 72 5a 55 6a 59 6a 70 54 62 54 56 5a 6f 68 7a 45 rZUjYjpTbTVZohzE 0090: 67 3d 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c g=",nc=00000001, 00a0: 71 6f 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 qop=auth-conf,ci 00b0: 70 68 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d pher=rc4,maxbuf= 00c0: 31 36 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 16777215,digest- 00d0: 75 72 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2e 67 uri="ldap/node.g 00e0: 61 63 22 2c 72 65 73 70 6f 6e 73 65 3d 38 33 35 ac",response=835 00f0: 62 65 33 64 32 62 65 66 30 31 32 34 35 62 66 66 be3d2bef01245bff 0100: 61 33 35 66 30 64 39 39 64 66 32 62 34 a35f0d99df2b4 ber_scanf fmt (}}) ber: ber_dump: buf=0x89233e8 ptr=0x8923511 end=0x8923511 len=0 >>> dnPrettyNormal: <> <<< dnPrettyNormal: <>, <> conn=3 op=1 BIND dn="" method=163 do_bind: dn () SASL mech DIGEST-MD5 ==> sasl_bind: dn="" mech=<continuing> datalen=265 SASL [conn=3] Debug: DIGEST-MD5 server step 2 SASL Canonicalize [conn=3]: authcid="user2@de" slap_sasl_getdn: conn 3 id=user2@de [len=8] => ldap_dn2bv(16) <= ldap_dn2bv(uid=user2@de,cn=DIGEST-MD5,cn=auth)=0 slap_sasl_getdn: u:id converted to uid=user2@de,cn=DIGEST-MD5,cn=auth >>> dnNormalize: <uid=user2@de,cn=DIGEST-MD5,cn=auth> => ldap_bv2dn(uid=user2@de,cn=DIGEST-MD5,cn=auth,0) <= ldap_bv2dn(uid=user2@de,cn=DIGEST-MD5,cn=auth)=0 => ldap_dn2bv(272) <= ldap_dn2bv(uid=user2@de,cn=digest-md5,cn=auth)=0 <<< dnNormalize: <uid=user2@de,cn=digest-md5,cn=auth> ==>slap_sasl2dn: converting SASL name uid=user2@de,cn=digest-md5,cn=auth to a DN ==> rewrite_context_apply [depth=1] string='uid=user2@de,cn=digest-md5,cn=auth' ==> rewrite_rule_apply rule='uid=datadmin,cn=digest-md5,cn=auth' string='uid=user2@de,cn=digest-md5,cn=auth' [1 pass(es)] ==> rewrite_rule_apply rule='uid=([^,@]*)@([^,]*),cn=digest-md5,cn=auth' string='uid=user2@de,cn=digest-md5,cn=auth' [1 pass(es)] ==> rewrite_context_apply [depth=1] res={0,'cn=user2,o=de,dc=gac'} [rw] authid: "uid=user2@de,cn=digest-md5,cn=auth" -> "cn=user2,o=de,dc=gac" slap_parseURI: parsing cn=user2,o=de,dc=gac ldap_url_parse_ext(cn=user2,o=de,dc=gac) >>> dnNormalize: <cn=user2,o=de,dc=gac> => ldap_bv2dn(cn=user2,o=de,dc=gac,0) <= ldap_bv2dn(cn=user2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnNormalize: <cn=user2,o=de,dc=gac> <==slap_sasl2dn: Converted SASL name to cn=user2,o=de,dc=gac slap_sasl_getdn: dn:id converted to cn=user2,o=de,dc=gac SASL Canonicalize [conn=3]: slapAuthcDN="cn=user2,o=de,dc=gac" conn=3 op=1: meta_back_getconn[0] conn=3 op=1 meta_back_getconn: candidates=1 conn=-1 fetched conn=3 op=1 >>> meta_back_search_start[0] conn=3 op=1 >>> meta_search_dobind_init[0] conn=3 op=1 <<< meta_search_dobind_init[0]=1 [rw] searchBase: "cn=user2,o=de,dc=gac" -> "cn=user2,o=de,dc=gac" [rw] searchFilter: "(objectClass=*)" -> "(objectClass=*)" ldap_search_ext put_filter: "(objectClass=*)" put_filter: simple put_simple_filter: "objectClass=*" ldap_build_search_req ATTRS: * ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x8924c28 ptr=0x8924c28 end=0x8924c63 len=59 0000: 30 39 02 01 05 63 34 04 14 63 6e 3d 75 73 65 72 09...c4..cn=user 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 0a 01 00 2,o=de,dc=gac... 0020: 0a 01 00 02 01 01 02 01 00 01 01 00 87 0b 6f 62 ..............ob 0030: 6a 65 63 74 43 6c 61 73 73 30 00 jectClass0. ber_scanf fmt ({) ber: ber_dump: buf=0x8924c28 ptr=0x8924c2d end=0x8924c63 len=54 0000: 63 34 04 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 c4..cn=user2,o=d 0010: 65 2c 64 63 3d 67 61 63 0a 01 00 0a 01 00 02 01 e,dc=gac........ 0020: 01 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 43 .........objectC 0030: 6c 61 73 73 30 00 lass0. ber_flush2: 59 bytes to sd 12 0000: 30 39 02 01 05 63 34 04 14 63 6e 3d 75 73 65 72 09...c4..cn=user 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 0a 01 00 2,o=de,dc=gac... 0020: 0a 01 00 02 01 01 02 01 00 01 01 00 87 0b 6f 62 ..............ob 0030: 6a 65 63 74 43 6c 61 73 73 30 00 jectClass0. ldap_write: want=59, written=59 0000: 30 39 02 01 05 63 34 04 14 63 6e 3d 75 73 65 72 09...c4..cn=user 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 0a 01 00 2,o=de,dc=gac... 0020: 0a 01 00 02 01 01 02 01 00 01 01 00 87 0b 6f 62 ..............ob 0030: 6a 65 63 74 43 6c 61 73 73 30 00 jectClass0. conn=3 op=1 <<< meta_back_search_start[0]=1 conn=3 op=1 meta_back_search: ncandidates=1 cnd="*" ldap_result ld 0x8900620 msgid 5 wait4msg ld 0x8900620 msgid 5 (timeout 0 usec) wait4msg continue ld 0x8900620 msgid 5 all 2 ** ld 0x8900620 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:23 2009 ** ld 0x8900620 Outstanding Requests: * msgid 5, origid 5, status InProgress outstanding referrals 0, parent count 0 ld 0x8900620 request count 1 (abandoned 0) ** ld 0x8900620 Response Queue: Empty ld 0x8900620 response count 0 ldap_chkResponseList ld 0x8900620 msgid 5 all 2 ldap_chkResponseList returns ld 0x8900620 NULL ldap_int_select daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL ldap_result ld 0x8900620 msgid 5 wait4msg ld 0x8900620 msgid 5 (timeout 100000 usec) wait4msg continue ld 0x8900620 msgid 5 all 2 ** ld 0x8900620 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:23 2009 ** ld 0x8900620 Outstanding Requests: * msgid 5, origid 5, status InProgress outstanding referrals 0, parent count 0 ld 0x8900620 request count 1 (abandoned 0) ** ld 0x8900620 Response Queue: Empty ld 0x8900620 response count 0 ldap_chkResponseList ld 0x8900620 msgid 5 all 2 ldap_chkResponseList returns ld 0x8900620 NULL ldap_int_select read1msg: ld 0x8900620 msgid 5 all 2 ber_get_next ldap_read: want=8, got=8 0000: 30 81 8a 02 01 05 64 81 0.....d. ldap_read: want=133, got=133 0000: 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d 64 65 ...cn=User2,o=de 0010: 2c 64 63 3d 67 61 63 30 6c 30 1e 04 0b 6f 62 6a ,dc=gac0l0...obj 0020: 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e 65 74 ectClass1...inet 0030: 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 6e 31 OrgPerson0...cn1 0040: 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e 31 07 ...User20...sn1. 0050: 04 05 55 73 65 72 32 30 14 04 09 67 69 76 65 6e ..User20...given 0060: 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 16 04 Name1...User20.. 0070: 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 .userPassword1.. 0080: 04 70 61 73 73 .pass ber_get_next: tag 0x30 len 138 contents: ber_dump: buf=0x89000f8 ptr=0x89000f8 end=0x8900182 len=138 0000: 02 01 05 64 81 84 04 14 63 6e 3d 55 73 65 72 32 ...d....cn=User2 0010: 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 6c 30 1e ,o=de,dc=gac0l0. 0020: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 ..objectClass1.. 0030: 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d .inetOrgPerson0. 0040: 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0d 04 ..cn1...User20.. 0050: 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 04 09 .sn1...User20... 0060: 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 givenName1...Use 0070: 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f r20...userPasswo 0080: 72 64 31 06 04 04 70 61 73 73 rd1...pass read1msg: ld 0x8900620 msgid 5 message type search-entry wait4msg ld 0x8900620 0 s 94885 us to go wait4msg continue ld 0x8900620 msgid 5 all 2 ** ld 0x8900620 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:23 2009 ** ld 0x8900620 Outstanding Requests: * msgid 5, origid 5, status InProgress outstanding referrals 0, parent count 0 ld 0x8900620 request count 1 (abandoned 0) ** ld 0x8900620 Response Queue: * msgid 5, type 100 ld 0x8900620 response count 1 ldap_chkResponseList ld 0x8900620 msgid 5 all 2 ldap_chkResponseList returns ld 0x8900620 msgid 5, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x89000f8 ptr=0x89000fb end=0x8900182 len=135 0000: 64 81 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d d....cn=User2,o= 0010: 64 65 2c 64 63 3d 67 61 63 30 6c 30 1e 04 0b 6f de,dc=gac0l0...o 0020: 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e bjectClass1...in 0030: 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 etOrgPerson0...c 0040: 6e 31 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e n1...User20...sn 0050: 31 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 1...User20...giv 0060: 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 enName1...User20 0070: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 ...userPassword1 0080: 06 04 04 70 61 73 73 ...pass [rw] searchResult: "cn=User2,o=de,dc=gac" -> "cn=User2,o=de,dc=gac" >>> dnPrettyNormal: <cn=User2,o=de,dc=gac> => ldap_bv2dn(cn=User2,o=de,dc=gac,0) <= ldap_bv2dn(cn=User2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=User2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnPrettyNormal: <cn=User2,o=de,dc=gac>, <cn=user2,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900116 end=0x8900182 len=108 0000: 30 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e ...inetOrgPerson 0020: 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0...cn1...User20 0030: 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 ...sn1...User20. 0040: 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 ..givenName1...U 0050: 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 ser20...userPass 0060: 77 6f 72 64 31 06 04 04 70 61 73 73 word1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x8900125 end=0x8900182 len=93 0000: 00 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f ....inetOrgPerso 0010: 6e 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 n0...cn1...User2 0020: 30 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 0...sn1...User20 0030: 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 ...givenName1... 0040: 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 User20...userPas 0050: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900136 end=0x8900182 len=76 0000: 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0...cn1...User20 0010: 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 ...sn1...User20. 0020: 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 ..givenName1...U 0030: 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 ser20...userPass 0040: 77 6f 72 64 31 06 04 04 70 61 73 73 word1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x890013c end=0x8900182 len=70 0000: 00 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e 31 ....User20...sn1 0010: 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 65 ...User20...give 0020: 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 16 nName1...User20. 0030: 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 ..userPassword1. 0040: 04 04 70 61 73 73 ..pass ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900145 end=0x8900182 len=61 0000: 30 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 0...sn1...User20 0010: 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 ...givenName1... 0020: 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 User20...userPas 0030: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x890014b end=0x8900182 len=55 0000: 00 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 ....User20...giv 0010: 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 enName1...User20 0020: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 ...userPassword1 0030: 06 04 04 70 61 73 73 ...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900154 end=0x8900182 len=46 0000: 30 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 0...givenName1.. 0010: 05 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 .User20...userPa 0020: 73 73 77 6f 72 64 31 06 04 04 70 61 73 73 ssword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x8900161 end=0x8900182 len=33 0000: 00 07 04 05 55 73 65 72 32 30 16 04 0c 75 73 65 ....User20...use 0010: 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 61 73 rPassword1...pas 0020: 73 s ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x890016a end=0x8900182 len=24 0000: 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 0...userPassword 0010: 31 06 04 04 70 61 73 73 1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x89000f8 ptr=0x890017a end=0x8900182 len=8 0000: 00 06 04 04 70 61 73 73 ....pass ber_scanf fmt ({m) ber: ber_dump: buf=0x89000f8 ptr=0x8900182 end=0x8900182 len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x89000f8 ptr=0x89000fb end=0x8900182 len=135 0000: 64 81 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d d....cn=User2,o= 0010: 64 65 2c 64 63 3d 67 61 63 00 6c 30 1e 04 0b 6f de,dc=gac.l0...o 0020: 62 6a 65 63 74 43 6c 61 73 73 00 0f 04 0d 69 6e bjectClass....in 0030: 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 etOrgPerson0...c 0040: 6e 00 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e n....User20...sn 0050: 00 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 ....User20...giv 0060: 65 6e 4e 61 6d 65 00 07 04 05 55 73 65 72 32 30 enName....User20 0070: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 00 ...userPassword. 0080: 06 04 04 70 61 73 73 ...pass => access_allowed: auth access to "cn=User2,o=de,dc=gac" "userPassword" requested => dn: [1] => acl_get: [2] attr userPassword => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "userPassword" requested => acl_mask: to all values by "", (=0) <= check a_dn_pat: cn=datadmin,dc=gac <= check a_dn_pat: * <= acl_mask: [2] applying auth(=xd) (stop) <= acl_mask: [2] mask: auth(=xd) => slap_access_allowed: auth access granted by auth(=xd) => access_allowed: auth access granted by auth(=xd) slap_ap_lookup: str2ad(cmusaslsecretDIGEST-MD5): attribute type undefined ldap_msgfree ldap_result ld 0x8900620 msgid 5 wait4msg ld 0x8900620 msgid 5 (timeout 0 usec) wait4msg continue ld 0x8900620 msgid 5 all 2 ** ld 0x8900620 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:23 2009 ** ld 0x8900620 Outstanding Requests: * msgid 5, origid 5, status InProgress outstanding referrals 0, parent count 0 ld 0x8900620 request count 1 (abandoned 0) ** ld 0x8900620 Response Queue: Empty ld 0x8900620 response count 0 ldap_chkResponseList ld 0x8900620 msgid 5 all 2 ldap_chkResponseList returns ld 0x8900620 NULL ldap_int_select read1msg: ld 0x8900620 msgid 5 all 2 ber_get_next ldap_read: want=8, got=8 0000: 30 0c 02 01 05 65 07 0a 0....e.. ldap_read: want=6, got=6 0000: 01 00 04 00 04 00 ...... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x88ecb80 ptr=0x88ecb80 end=0x88ecb8c len=12 0000: 02 01 05 65 07 0a 01 00 04 00 04 00 ...e........ read1msg: ld 0x8900620 msgid 5 message type search-result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x88ecb80 ptr=0x88ecb83 end=0x88ecb8c len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ read1msg: ld 0x8900620 0 new referrals read1msg: mark request completed, ld 0x8900620 msgid 5 request done: ld 0x8900620 msgid 5 res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 5, msgid 5) ldap_free_connection 0 1 ldap_free_connection: refcnt 1 ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x88ecb80 ptr=0x88ecb83 end=0x88ecb8c len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ ber_scanf fmt (}) ber: ber_dump: buf=0x88ecb80 ptr=0x88ecb8c end=0x88ecb8c len=0 conn=3 op=1 meta_back_search[0] match="" err=0. ldap_msgfree send_ldap_result: conn=3 op=1 p=3 send_ldap_result: err=0 matched="" text="" SASL Canonicalize [conn=3]: authzid="user2@de" SASL proxy authorize [conn=3]: authcid="user2@de" authzid="user2@de" conn=3 op=1 BIND authcid="user2@de" authzid="user2@de" SASL Authorize [conn=3]: proxy authorization allowed authzDN="" send_ldap_sasl: err=0 len=40 conn=3 op=1 BIND dn="cn=user2,o=de,dc=gac" mech=DIGEST-MD5 sasl_ssf=128 ssf=128 do_bind: SASL/DIGEST-MD5 bind: dn="cn=user2,o=de,dc=gac" sasl_ssf=128 send_ldap_response: msgid=2 tag=97 err=0 ber_flush2: 56 bytes to sd 11 0000: 30 36 02 01 02 61 31 0a 01 00 04 00 04 00 87 28 06...a1........( 0010: 72 73 70 61 75 74 68 3d 36 34 64 32 34 61 33 66 rspauth=64d24a3f 0020: 35 36 32 65 64 62 62 64 35 66 39 61 33 61 62 62 562edbbd5f9a3abb 0030: 36 34 35 39 34 62 37 61 64594b7a ldap_write: want=56, written=56 0000: 30 36 02 01 02 61 31 0a 01 00 04 00 04 00 87 28 06...a1........( 0010: 72 73 70 61 75 74 68 3d 36 34 64 32 34 61 33 66 rspauth=64d24a3f 0020: 35 36 32 65 64 62 62 64 35 66 39 61 33 61 62 62 562edbbd5f9a3abb 0030: 36 34 35 39 34 62 37 61 64594b7a conn=3 op=1 RESULT tag=97 err=0 text= <== slap_sasl_bind: rc=0 daemon: activity on 1 descriptor daemon: activity on: 11r daemon: read active on 11 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(11) connection_get(11): got connid=3 connection_read(11): checking for input on id=3 ldap_pvt_sasl_install ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 3d ...= sasl_read: want=61, got=61 0000: 61 16 8b 42 1b 22 4d 2a 76 d5 8a 4c ae c0 47 ea a..B."M*v..L..G. 0010: 15 10 7e 7f a7 72 20 20 d9 cc d5 f6 47 ca e4 01 ..~..r ....G... 0020: 9f 09 d0 1e 86 e0 a2 7e 23 a4 fd 64 2d 1b 7e b7 .......~#..d-.~. 0030: 7a 9b f5 35 56 1b dd 00 01 00 00 00 00 z..5V........ ldap_read: want=8, got=8 0000: 30 2b 02 01 03 63 26 04 0+...c&. ldap_read: want=37, got=37 0000: 06 64 63 3d 67 61 63 0a 01 02 0a 01 00 02 01 00 .dc=gac......... 0010: 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 63 6c ........objectcl 0020: 61 73 73 30 00 ass0. ber_get_next: tag 0x30 len 43 contents: ber_dump: buf=0x8923fa0 ptr=0x8923fa0 end=0x8923fcb len=43 0000: 02 01 03 63 26 04 06 64 63 3d 67 61 63 0a 01 02 ...c&..dc=gac... 0010: 0a 01 00 02 01 00 02 01 00 01 01 00 87 0b 6f 62 ..............ob 0020: 6a 65 63 74 63 6c 61 73 73 30 00 jectclass0. ber_get_next sasl_read: want=4 error=Resource temporarily unavailable ldap_read: want=8 error=Resource temporarily unavailable conn=3 op=2 do_search ber_scanf fmt ({miiiib) ber: ber_dump: buf=0x8923fa0 ptr=0x8923fa3 end=0x8923fcb len=40 0000: 63 26 04 06 64 63 3d 67 61 63 0a 01 02 0a 01 00 c&..dc=gac...... 0010: 02 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 ...........objec 0020: 74 63 6c 61 73 73 30 00 tclass0. >>> dnPrettyNormal: <dc=gac> => ldap_bv2dn(dc=gac,0) <= ldap_bv2dn(dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=gac)=0 <<< dnPrettyNormal: <dc=gac>, <dc=gac> SRCH "dc=gac" 2 0 0 0 0 begin get_filter PRESENT ber_scanf fmt (m) ber: ber_dump: buf=0x8923fa0 ptr=0x8923fbc end=0x8923fcb len=15 0000: 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 30 00 ..objectclass0. end get_filter 0 filter: (objectClass=*) ber_scanf fmt ({M}}) ber: ber_dump: buf=0x8923fa0 ptr=0x8923fc9 end=0x8923fcb len=2 0000: 00 00 .. attrs: conn=3 op=2 SRCH base="dc=gac" scope=2 deref=0 filter="(objectClass=*)" ==> limits_get: conn=3 op=2 dn="cn=user2,o=de,dc=gac" ldap_create ldap_url_parse_ext(ldap://192.168.112.11) conn=3 op=2: meta_back_getconn[0] conn=3 op=2 meta_back_getconn: candidates=1 conn=3 inserted conn=3 op=2 >>> meta_back_search_start[0] conn=3 op=2 >>> meta_search_dobind_init[0] ldap_sasl_interactive_bind_s: user selected: digest-md5 ldap_int_sasl_bind: digest-md5 ldap_new_connection 1 1 0 ldap_int_open_connection ldap_connect_to_host: TCP 192.168.112.11:389 ldap_new_socket: 13 ldap_prepare_socket: 13 ldap_connect_to_host: Trying 192.168.112.11:389 ldap_pvt_connect: fd: 13 tm: -1 async: 0 daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL ldap_int_sasl_open: host=node-2.local ldap_sasl_bind_s ldap_sasl_bind ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x8920818 ptr=0x8920818 end=0x8920957 len=319 0000: 30 82 01 3b 02 01 01 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 78 77 e.gac",nonce="xw 0060: 4b 72 6a 59 52 4a 65 48 72 65 41 49 66 46 37 65 KrjYRJeHreAIfF7e 0070: 55 61 33 2b 4c 64 31 39 78 78 74 4b 76 61 34 38 Ua3+Ld19xxtKva48 0080: 6e 39 4c 39 38 46 56 71 41 3d 22 2c 63 6e 6f 6e n9L98FVqA=",cnon 0090: 63 65 3d 22 43 33 59 47 59 47 72 34 76 56 41 4f ce="C3YGYGr4vVAO 00a0: 61 71 63 48 59 48 47 44 76 4e 44 77 4a 54 30 46 aqcHYHGDvNDwJT0F 00b0: 6f 59 47 77 51 75 42 52 49 68 58 4f 73 5a 41 3d oYGwQuBRIhXOsZA= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 32 2c 71 6f ",nc=00000002,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 31 ocal",response=1 0120: 39 34 63 34 63 64 36 32 33 30 36 66 30 38 61 32 94c4cd62306f08a2 0130: 61 38 30 64 36 31 32 65 32 61 65 36 63 37 38 a80d612e2ae6c78 ber_scanf fmt ({i) ber: ber_dump: buf=0x8920818 ptr=0x892081f end=0x8920957 len=312 0000: 60 82 01 34 02 01 03 04 12 63 6e 3d 64 61 74 61 `..4.....cn=data 0010: 64 6d 69 6e 2c 64 63 3d 67 61 63 a3 82 01 19 04 dmin,dc=gac..... 0020: 0a 44 49 47 45 53 54 2d 4d 44 35 04 82 01 09 75 .DIGEST-MD5....u 0030: 73 65 72 6e 61 6d 65 3d 22 72 6f 6f 74 22 2c 72 sername="root",r 0040: 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c ealm="node.gac", 0050: 6e 6f 6e 63 65 3d 22 78 77 4b 72 6a 59 52 4a 65 nonce="xwKrjYRJe 0060: 48 72 65 41 49 66 46 37 65 55 61 33 2b 4c 64 31 HreAIfF7eUa3+Ld1 0070: 39 78 78 74 4b 76 61 34 38 6e 39 4c 39 38 46 56 9xxtKva48n9L98FV 0080: 71 41 3d 22 2c 63 6e 6f 6e 63 65 3d 22 43 33 59 qA=",cnonce="C3Y 0090: 47 59 47 72 34 76 56 41 4f 61 71 63 48 59 48 47 GYGr4vVAOaqcHYHG 00a0: 44 76 4e 44 77 4a 54 30 46 6f 59 47 77 51 75 42 DvNDwJT0FoYGwQuB 00b0: 52 49 68 58 4f 73 5a 41 3d 22 2c 6e 63 3d 30 30 RIhXOsZA=",nc=00 00c0: 30 30 30 30 30 32 2c 71 6f 70 3d 61 75 74 68 2d 000002,qop=auth- 00d0: 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 34 2c conf,cipher=rc4, 00e0: 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 35 2c maxbuf=16777215, 00f0: 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 61 70 digest-uri="ldap 0100: 2f 6e 6f 64 65 2d 32 2e 6c 6f 63 61 6c 22 2c 72 /node-2.local",r 0110: 65 73 70 6f 6e 73 65 3d 31 39 34 63 34 63 64 36 esponse=194c4cd6 0120: 32 33 30 36 66 30 38 61 32 61 38 30 64 36 31 32 2306f08a2a80d612 0130: 65 32 61 65 36 63 37 38 e2ae6c78 ber_flush2: 319 bytes to sd 13 0000: 30 82 01 3b 02 01 01 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 78 77 e.gac",nonce="xw 0060: 4b 72 6a 59 52 4a 65 48 72 65 41 49 66 46 37 65 KrjYRJeHreAIfF7e 0070: 55 61 33 2b 4c 64 31 39 78 78 74 4b 76 61 34 38 Ua3+Ld19xxtKva48 0080: 6e 39 4c 39 38 46 56 71 41 3d 22 2c 63 6e 6f 6e n9L98FVqA=",cnon 0090: 63 65 3d 22 43 33 59 47 59 47 72 34 76 56 41 4f ce="C3YGYGr4vVAO 00a0: 61 71 63 48 59 48 47 44 76 4e 44 77 4a 54 30 46 aqcHYHGDvNDwJT0F 00b0: 6f 59 47 77 51 75 42 52 49 68 58 4f 73 5a 41 3d oYGwQuBRIhXOsZA= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 32 2c 71 6f ",nc=00000002,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 31 ocal",response=1 0120: 39 34 63 34 63 64 36 32 33 30 36 66 30 38 61 32 94c4cd62306f08a2 0130: 61 38 30 64 36 31 32 65 32 61 65 36 63 37 38 a80d612e2ae6c78 ldap_write: want=319, written=319 0000: 30 82 01 3b 02 01 01 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 78 77 e.gac",nonce="xw 0060: 4b 72 6a 59 52 4a 65 48 72 65 41 49 66 46 37 65 KrjYRJeHreAIfF7e 0070: 55 61 33 2b 4c 64 31 39 78 78 74 4b 76 61 34 38 Ua3+Ld19xxtKva48 0080: 6e 39 4c 39 38 46 56 71 41 3d 22 2c 63 6e 6f 6e n9L98FVqA=",cnon 0090: 63 65 3d 22 43 33 59 47 59 47 72 34 76 56 41 4f ce="C3YGYGr4vVAO 00a0: 61 71 63 48 59 48 47 44 76 4e 44 77 4a 54 30 46 aqcHYHGDvNDwJT0F 00b0: 6f 59 47 77 51 75 42 52 49 68 58 4f 73 5a 41 3d oYGwQuBRIhXOsZA= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 32 2c 71 6f ",nc=00000002,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 31 ocal",response=1 0120: 39 34 63 34 63 64 36 32 33 30 36 66 30 38 61 32 94c4cd62306f08a2 0130: 61 38 30 64 36 31 32 65 32 61 65 36 63 37 38 a80d612e2ae6c78 ldap_result ld 0x88f5380 msgid 1 wait4msg ld 0x88f5380 msgid 1 (infinite timeout) wait4msg continue ld 0x88f5380 msgid 1 all 1 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 1, origid 1, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 1 all 1 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 1 all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 81 e1 02 01 01 61 81 0.....a. ldap_read: want=220, got=220 0000: db 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 29 3a ........SASL(0): 0010: 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 73 75 successful resu 0020: 6c 74 3a 20 87 81 b5 6e 6f 6e 63 65 3d 22 49 6a lt: ...nonce="Ij 0030: 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 q+Ki4kJzVIztl3GQ 0040: 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 6x7QynwsORjodGzT 0050: 61 48 46 74 52 44 4c 43 41 3d 22 2c 72 65 61 6c aHFtRDLCA=",real 0060: 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c 71 6f 70 m="node.gac",qop 0070: 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e 74 2c ="auth,auth-int, 0080: 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 68 65 auth-conf",ciphe 0090: 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d 35 36 r="rc4-40,rc4-56 00a0: 2c 72 63 34 2c 64 65 73 2c 33 64 65 73 22 2c 6d ,rc4,des,3des",m 00b0: 61 78 62 75 66 3d 36 35 35 33 36 2c 63 68 61 72 axbuf=65536,char 00c0: 73 65 74 3d 75 74 66 2d 38 2c 61 6c 67 6f 72 69 set=utf-8,algori 00d0: 74 68 6d 3d 6d 64 35 2d 73 65 73 73 thm=md5-sess ber_get_next: tag 0x30 len 225 contents: ber_dump: buf=0x89242a8 ptr=0x89242a8 end=0x8924389 len=225 0000: 02 01 01 61 81 db 0a 01 0e 04 00 04 1c 53 41 53 ...a.........SAS 0010: 4c 28 30 29 3a 20 73 75 63 63 65 73 73 66 75 6c L(0): successful 0020: 20 72 65 73 75 6c 74 3a 20 87 81 b5 6e 6f 6e 63 result: ...nonc 0030: 65 3d 22 49 6a 71 2b 4b 69 34 6b 4a 7a 56 49 7a e="Ijq+Ki4kJzVIz 0040: 74 6c 33 47 51 36 78 37 51 79 6e 77 73 4f 52 6a tl3GQ6x7QynwsORj 0050: 6f 64 47 7a 54 61 48 46 74 52 44 4c 43 41 3d 22 odGzTaHFtRDLCA=" 0060: 2c 72 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 ,realm="node.gac 0070: 22 2c 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 ",qop="auth,auth 0080: 2d 69 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c -int,auth-conf", 0090: 63 69 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 cipher="rc4-40,r 00a0: 63 34 2d 35 36 2c 72 63 34 2c 64 65 73 2c 33 64 c4-56,rc4,des,3d 00b0: 65 73 22 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 es",maxbuf=65536 00c0: 2c 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 ,charset=utf-8,a 00d0: 6c 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 lgorithm=md5-ses 00e0: 73 s read1msg: ld 0x88f5380 msgid 1 message type bind ber_scanf fmt ({eAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x8924389 len=222 0000: 61 81 db 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re 0020: 73 75 6c 74 3a 20 87 81 b5 6e 6f 6e 63 65 3d 22 sult: ...nonce=" 0030: 49 6a 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 Ijq+Ki4kJzVIztl3 0040: 47 51 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 GQ6x7QynwsORjodG 0050: 7a 54 61 48 46 74 52 44 4c 43 41 3d 22 2c 72 65 zTaHFtRDLCA=",re 0060: 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c 71 alm="node.gac",q 0070: 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e op="auth,auth-in 0080: 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 t,auth-conf",cip 0090: 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d her="rc4-40,rc4- 00a0: 35 36 2c 72 63 34 2c 64 65 73 2c 33 64 65 73 22 56,rc4,des,3des" 00b0: 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 63 68 ,maxbuf=65536,ch 00c0: 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c 67 6f arset=utf-8,algo 00d0: 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 rithm=md5-sess read1msg: ld 0x88f5380 0 new referrals read1msg: mark request completed, ld 0x88f5380 msgid 1 request done: ld 0x88f5380 msgid 1 res_errno: 14, res_error: <SASL(0): successful result: >, res_matched: <> ldap_free_request (origid 1, msgid 1) ldap_free_connection 0 1 ldap_free_connection: refcnt 1 ldap_parse_sasl_bind_result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x8924389 len=222 0000: 61 81 db 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re 0020: 73 75 6c 74 3a 20 87 81 b5 6e 6f 6e 63 65 3d 22 sult: ...nonce=" 0030: 49 6a 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 Ijq+Ki4kJzVIztl3 0040: 47 51 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 GQ6x7QynwsORjodG 0050: 7a 54 61 48 46 74 52 44 4c 43 41 3d 22 2c 72 65 zTaHFtRDLCA=",re 0060: 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c 71 alm="node.gac",q 0070: 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e op="auth,auth-in 0080: 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 t,auth-conf",cip 0090: 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d her="rc4-40,rc4- 00a0: 35 36 2c 72 63 34 2c 64 65 73 2c 33 64 65 73 22 56,rc4,des,3des" 00b0: 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 63 68 ,maxbuf=65536,ch 00c0: 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c 67 6f arset=utf-8,algo 00d0: 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 rithm=md5-sess ber_scanf fmt (O) ber: ber_dump: buf=0x89242a8 ptr=0x89242d1 end=0x8924389 len=184 0000: 87 81 b5 6e 6f 6e 63 65 3d 22 49 6a 71 2b 4b 69 ...nonce="Ijq+Ki 0010: 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 36 78 37 51 4kJzVIztl3GQ6x7Q 0020: 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 61 48 46 74 ynwsORjodGzTaHFt 0030: 52 44 4c 43 41 3d 22 2c 72 65 61 6c 6d 3d 22 6e RDLCA=",realm="n 0040: 6f 64 65 2e 67 61 63 22 2c 71 6f 70 3d 22 61 75 ode.gac",qop="au 0050: 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 68 th,auth-int,auth 0060: 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 72 -conf",cipher="r 0070: 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 34 c4-40,rc4-56,rc4 0080: 2c 64 65 73 2c 33 64 65 73 22 2c 6d 61 78 62 75 ,des,3des",maxbu 0090: 66 3d 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d f=65536,charset= 00a0: 75 74 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d utf-8,algorithm= 00b0: 6d 64 35 2d 73 65 73 73 md5-sess ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x8924389 len=222 0000: 61 81 db 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re 0020: 73 75 6c 74 3a 20 87 81 b5 6e 6f 6e 63 65 3d 22 sult: ...nonce=" 0030: 49 6a 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 Ijq+Ki4kJzVIztl3 0040: 47 51 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 GQ6x7QynwsORjodG 0050: 7a 54 61 48 46 74 52 44 4c 43 41 3d 22 2c 72 65 zTaHFtRDLCA=",re 0060: 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c 71 alm="node.gac",q 0070: 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e op="auth,auth-in 0080: 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 t,auth-conf",cip 0090: 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d her="rc4-40,rc4- 00a0: 35 36 2c 72 63 34 2c 64 65 73 2c 33 64 65 73 22 56,rc4,des,3des" 00b0: 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 63 68 ,maxbuf=65536,ch 00c0: 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c 67 6f arset=utf-8,algo 00d0: 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 rithm=md5-sess ber_scanf fmt (x) ber: ber_dump: buf=0x89242a8 ptr=0x89242d1 end=0x8924389 len=184 0000: 87 81 b5 6e 6f 6e 63 65 3d 22 49 6a 71 2b 4b 69 ...nonce="Ijq+Ki 0010: 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 36 78 37 51 4kJzVIztl3GQ6x7Q 0020: 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 61 48 46 74 ynwsORjodGzTaHFt 0030: 52 44 4c 43 41 3d 22 2c 72 65 61 6c 6d 3d 22 6e RDLCA=",realm="n 0040: 6f 64 65 2e 67 61 63 22 2c 71 6f 70 3d 22 61 75 ode.gac",qop="au 0050: 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 68 th,auth-int,auth 0060: 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 72 -conf",cipher="r 0070: 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 34 c4-40,rc4-56,rc4 0080: 2c 64 65 73 2c 33 64 65 73 22 2c 6d 61 78 62 75 ,des,3des",maxbu 0090: 66 3d 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d f=65536,charset= 00a0: 75 74 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d utf-8,algorithm= 00b0: 6d 64 35 2d 73 65 73 73 md5-sess ber_scanf fmt (}) ber: ber_dump: buf=0x89242a8 ptr=0x8924389 end=0x8924389 len=0 ldap_msgfree sasl_client_step: 1 ldap_sasl_bind_s ldap_sasl_bind ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x89304a0 ptr=0x89304a0 end=0x89305df len=319 0000: 30 82 01 3b 02 01 02 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 49 6a e.gac",nonce="Ij 0060: 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 q+Ki4kJzVIztl3GQ 0070: 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 6x7QynwsORjodGzT 0080: 61 48 46 74 52 44 4c 43 41 3d 22 2c 63 6e 6f 6e aHFtRDLCA=",cnon 0090: 63 65 3d 22 50 50 39 72 32 38 6e 37 2b 55 6f 41 ce="PP9r28n7+UoA 00a0: 49 35 76 48 61 50 63 58 45 6a 6d 4b 68 73 34 37 I5vHaPcXEjmKhs47 00b0: 6d 79 2f 75 6d 57 70 65 61 52 4f 48 79 45 30 3d my/umWpeaROHyE0= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c 71 6f ",nc=00000001,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 34 ocal",response=4 0120: 31 38 35 35 38 30 32 63 36 38 63 62 32 38 61 66 1855802c68cb28af 0130: 35 34 31 31 63 66 32 37 66 66 31 38 31 65 36 5411cf27ff181e6 ber_scanf fmt ({i) ber: ber_dump: buf=0x89304a0 ptr=0x89304a7 end=0x89305df len=312 0000: 60 82 01 34 02 01 03 04 12 63 6e 3d 64 61 74 61 `..4.....cn=data 0010: 64 6d 69 6e 2c 64 63 3d 67 61 63 a3 82 01 19 04 dmin,dc=gac..... 0020: 0a 44 49 47 45 53 54 2d 4d 44 35 04 82 01 09 75 .DIGEST-MD5....u 0030: 73 65 72 6e 61 6d 65 3d 22 72 6f 6f 74 22 2c 72 sername="root",r 0040: 65 61 6c 6d 3d 22 6e 6f 64 65 2e 67 61 63 22 2c ealm="node.gac", 0050: 6e 6f 6e 63 65 3d 22 49 6a 71 2b 4b 69 34 6b 4a nonce="Ijq+Ki4kJ 0060: 7a 56 49 7a 74 6c 33 47 51 36 78 37 51 79 6e 77 zVIztl3GQ6x7Qynw 0070: 73 4f 52 6a 6f 64 47 7a 54 61 48 46 74 52 44 4c sORjodGzTaHFtRDL 0080: 43 41 3d 22 2c 63 6e 6f 6e 63 65 3d 22 50 50 39 CA=",cnonce="PP9 0090: 72 32 38 6e 37 2b 55 6f 41 49 35 76 48 61 50 63 r28n7+UoAI5vHaPc 00a0: 58 45 6a 6d 4b 68 73 34 37 6d 79 2f 75 6d 57 70 XEjmKhs47my/umWp 00b0: 65 61 52 4f 48 79 45 30 3d 22 2c 6e 63 3d 30 30 eaROHyE0=",nc=00 00c0: 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 68 2d 000001,qop=auth- 00d0: 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 34 2c conf,cipher=rc4, 00e0: 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 35 2c maxbuf=16777215, 00f0: 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 61 70 digest-uri="ldap 0100: 2f 6e 6f 64 65 2d 32 2e 6c 6f 63 61 6c 22 2c 72 /node-2.local",r 0110: 65 73 70 6f 6e 73 65 3d 34 31 38 35 35 38 30 32 esponse=41855802 0120: 63 36 38 63 62 32 38 61 66 35 34 31 31 63 66 32 c68cb28af5411cf2 0130: 37 66 66 31 38 31 65 36 7ff181e6 ber_flush2: 319 bytes to sd 13 0000: 30 82 01 3b 02 01 02 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 49 6a e.gac",nonce="Ij 0060: 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 q+Ki4kJzVIztl3GQ 0070: 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 6x7QynwsORjodGzT 0080: 61 48 46 74 52 44 4c 43 41 3d 22 2c 63 6e 6f 6e aHFtRDLCA=",cnon 0090: 63 65 3d 22 50 50 39 72 32 38 6e 37 2b 55 6f 41 ce="PP9r28n7+UoA 00a0: 49 35 76 48 61 50 63 58 45 6a 6d 4b 68 73 34 37 I5vHaPcXEjmKhs47 00b0: 6d 79 2f 75 6d 57 70 65 61 52 4f 48 79 45 30 3d my/umWpeaROHyE0= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c 71 6f ",nc=00000001,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 34 ocal",response=4 0120: 31 38 35 35 38 30 32 63 36 38 63 62 32 38 61 66 1855802c68cb28af 0130: 35 34 31 31 63 66 32 37 66 66 31 38 31 65 36 5411cf27ff181e6 ldap_write: want=319, written=319 0000: 30 82 01 3b 02 01 02 60 82 01 34 02 01 03 04 12 0..;...`..4..... 0010: 63 6e 3d 64 61 74 61 64 6d 69 6e 2c 64 63 3d 67 cn=datadmin,dc=g 0020: 61 63 a3 82 01 19 04 0a 44 49 47 45 53 54 2d 4d ac......DIGEST-M 0030: 44 35 04 82 01 09 75 73 65 72 6e 61 6d 65 3d 22 D5....username=" 0040: 72 6f 6f 74 22 2c 72 65 61 6c 6d 3d 22 6e 6f 64 root",realm="nod 0050: 65 2e 67 61 63 22 2c 6e 6f 6e 63 65 3d 22 49 6a e.gac",nonce="Ij 0060: 71 2b 4b 69 34 6b 4a 7a 56 49 7a 74 6c 33 47 51 q+Ki4kJzVIztl3GQ 0070: 36 78 37 51 79 6e 77 73 4f 52 6a 6f 64 47 7a 54 6x7QynwsORjodGzT 0080: 61 48 46 74 52 44 4c 43 41 3d 22 2c 63 6e 6f 6e aHFtRDLCA=",cnon 0090: 63 65 3d 22 50 50 39 72 32 38 6e 37 2b 55 6f 41 ce="PP9r28n7+UoA 00a0: 49 35 76 48 61 50 63 58 45 6a 6d 4b 68 73 34 37 I5vHaPcXEjmKhs47 00b0: 6d 79 2f 75 6d 57 70 65 61 52 4f 48 79 45 30 3d my/umWpeaROHyE0= 00c0: 22 2c 6e 63 3d 30 30 30 30 30 30 30 31 2c 71 6f ",nc=00000001,qo 00d0: 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 63 69 70 68 p=auth-conf,ciph 00e0: 65 72 3d 72 63 34 2c 6d 61 78 62 75 66 3d 31 36 er=rc4,maxbuf=16 00f0: 37 37 37 32 31 35 2c 64 69 67 65 73 74 2d 75 72 777215,digest-ur 0100: 69 3d 22 6c 64 61 70 2f 6e 6f 64 65 2d 32 2e 6c i="ldap/node-2.l 0110: 6f 63 61 6c 22 2c 72 65 73 70 6f 6e 73 65 3d 34 ocal",response=4 0120: 31 38 35 35 38 30 32 63 36 38 63 62 32 38 61 66 1855802c68cb28af 0130: 35 34 31 31 63 66 32 37 66 66 31 38 31 65 36 5411cf27ff181e6 ldap_result ld 0x88f5380 msgid 2 wait4msg ld 0x88f5380 msgid 2 (infinite timeout) wait4msg continue ld 0x88f5380 msgid 2 all 1 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 2 all 1 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 2 all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 36 02 01 02 61 31 0a 06...a1. ldap_read: want=48, got=48 0000: 01 00 04 00 04 00 87 28 72 73 70 61 75 74 68 3d .......(rspauth= 0010: 35 36 65 64 61 37 65 64 32 65 62 38 63 38 39 32 56eda7ed2eb8c892 0020: 66 30 34 62 32 30 34 65 65 34 64 30 35 35 34 37 f04b204ee4d05547 ber_get_next: tag 0x30 len 54 contents: ber_dump: buf=0x89242a8 ptr=0x89242a8 end=0x89242de len=54 0000: 02 01 02 61 31 0a 01 00 04 00 04 00 87 28 72 73 ...a1........(rs 0010: 70 61 75 74 68 3d 35 36 65 64 61 37 65 64 32 65 pauth=56eda7ed2e 0020: 62 38 63 38 39 32 66 30 34 62 32 30 34 65 65 34 b8c892f04b204ee4 0030: 64 30 35 35 34 37 d05547 read1msg: ld 0x88f5380 msgid 2 message type bind ber_scanf fmt ({eAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x89242de len=51 0000: 61 31 0a 01 00 04 00 04 00 87 28 72 73 70 61 75 a1........(rspau 0010: 74 68 3d 35 36 65 64 61 37 65 64 32 65 62 38 63 th=56eda7ed2eb8c 0020: 38 39 32 66 30 34 62 32 30 34 65 65 34 64 30 35 892f04b204ee4d05 0030: 35 34 37 547 read1msg: ld 0x88f5380 0 new referrals read1msg: mark request completed, ld 0x88f5380 msgid 2 request done: ld 0x88f5380 msgid 2 res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 2, msgid 2) ldap_free_connection 0 1 ldap_free_connection: refcnt 1 ldap_parse_sasl_bind_result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x89242de len=51 0000: 61 31 0a 01 00 04 00 04 00 87 28 72 73 70 61 75 a1........(rspau 0010: 74 68 3d 35 36 65 64 61 37 65 64 32 65 62 38 63 th=56eda7ed2eb8c 0020: 38 39 32 66 30 34 62 32 30 34 65 65 34 64 30 35 892f04b204ee4d05 0030: 35 34 37 547 ber_scanf fmt (O) ber: ber_dump: buf=0x89242a8 ptr=0x89242b4 end=0x89242de len=42 0000: 87 28 72 73 70 61 75 74 68 3d 35 36 65 64 61 37 .(rspauth=56eda7 0010: 65 64 32 65 62 38 63 38 39 32 66 30 34 62 32 30 ed2eb8c892f04b20 0020: 34 65 65 34 64 30 35 35 34 37 4ee4d05547 ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x89242a8 ptr=0x89242ab end=0x89242de len=51 0000: 61 31 0a 01 00 04 00 04 00 87 28 72 73 70 61 75 a1........(rspau 0010: 74 68 3d 35 36 65 64 61 37 65 64 32 65 62 38 63 th=56eda7ed2eb8c 0020: 38 39 32 66 30 34 62 32 30 34 65 65 34 64 30 35 892f04b204ee4d05 0030: 35 34 37 547 ber_scanf fmt (x) ber: ber_dump: buf=0x89242a8 ptr=0x89242b4 end=0x89242de len=42 0000: 87 28 72 73 70 61 75 74 68 3d 35 36 65 64 61 37 .(rspauth=56eda7 0010: 65 64 32 65 62 38 63 38 39 32 66 30 34 62 32 30 ed2eb8c892f04b20 0020: 34 65 65 34 64 30 35 35 34 37 4ee4d05547 ber_scanf fmt (}) ber: ber_dump: buf=0x89242a8 ptr=0x89242de end=0x89242de len=0 ldap_msgfree sasl_client_step: 0 ldap_pvt_sasl_install conn=3 op=2 <<< meta_search_dobind_init[0]=1 [rw] searchBase: "dc=gac" -> "dc=gac" [rw] searchFilter: "(objectClass=*)" -> "(objectClass=*)" ldap_search_ext put_filter: "(objectClass=*)" put_filter: simple put_simple_filter: "objectClass=*" ldap_build_search_req ATTRS: * ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x89314e8 ptr=0x89314e8 end=0x8931517 len=47 0000: 30 2d 02 01 03 63 28 04 06 64 63 3d 67 61 63 0a 0-...c(..dc=gac. 0010: 01 02 0a 01 00 02 02 01 f4 02 02 0e 10 01 01 00 ................ 0020: 87 0b 6f 62 6a 65 63 74 43 6c 61 73 73 30 00 ..objectClass0. ber_scanf fmt ({) ber: ber_dump: buf=0x89314e8 ptr=0x89314ed end=0x8931517 len=42 0000: 63 28 04 06 64 63 3d 67 61 63 0a 01 02 0a 01 00 c(..dc=gac...... 0010: 02 02 01 f4 02 02 0e 10 01 01 00 87 0b 6f 62 6a .............obj 0020: 65 63 74 43 6c 61 73 73 30 00 ectClass0. ber_flush2: 47 bytes to sd 13 0000: 30 2d 02 01 03 63 28 04 06 64 63 3d 67 61 63 0a 0-...c(..dc=gac. 0010: 01 02 0a 01 00 02 02 01 f4 02 02 0e 10 01 01 00 ................ 0020: 87 0b 6f 62 6a 65 63 74 43 6c 61 73 73 30 00 ..objectClass0. sasl_write: want=67, written=67 0000: 00 00 00 3f 30 03 26 1a c6 d2 e0 d3 73 5a 16 f7 ...?0.&.....sZ.. 0010: 14 f8 04 b2 0a e8 79 e3 0c ea ec 99 c6 24 ff 09 ......y......$.. 0020: f5 56 8e 48 69 83 39 95 bf ed 32 b7 0d 1e 8c fe .V.Hi.9...2..... 0030: 43 f2 f3 cb 20 cb e7 88 87 0a ce 3e ea 00 01 00 C... ......>.... 0040: 00 00 00 ... ldap_write: want=47, written=47 0000: 30 2d 02 01 03 63 28 04 06 64 63 3d 67 61 63 0a 0-...c(..dc=gac. 0010: 01 02 0a 01 00 02 02 01 f4 02 02 0e 10 01 01 00 ................ 0020: 87 0b 6f 62 6a 65 63 74 43 6c 61 73 73 30 00 ..objectClass0. conn=3 op=2 <<< meta_back_search_start[0]=1 conn=3 op=2 meta_back_search: ncandidates=1 cnd="*" ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 37 ...7 sasl_read: want=55, got=55 0000: 13 01 fe 47 77 d4 71 21 9b 42 1d 85 74 36 e7 ce ...Gw.q!.B..t6.. 0010: b3 66 a5 15 94 42 5e 09 19 23 d2 a4 c3 43 e8 4f .f...B^..#...C.O 0020: bd f5 12 ac c9 8d 4d 5c fc 3e 52 cc c6 45 60 8a ......M\.>R..E`. 0030: 1d 00 01 00 00 00 00 ....... ldap_read: want=8, got=8 0000: 30 25 02 01 03 64 20 04 0%...d . ldap_read: want=31, got=31 0000: 06 64 63 3d 67 61 63 30 16 30 14 04 0b 6f 62 6a .dc=gac0.0...obj 0010: 65 63 74 43 6c 61 73 73 31 05 04 03 74 6f 70 ectClass1...top ber_get_next: tag 0x30 len 37 contents: ber_dump: buf=0x89246f0 ptr=0x89246f0 end=0x8924715 len=37 0000: 02 01 03 64 20 04 06 64 63 3d 67 61 63 30 16 30 ...d ..dc=gac0.0 0010: 14 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 05 ...objectClass1. 0020: 04 03 74 6f 70 ..top read1msg: ld 0x88f5380 msgid 3 message type search-entry wait4msg ld 0x88f5380 0 s 97635 us to go wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x89246f0 ptr=0x89246f3 end=0x8924715 len=34 0000: 64 20 04 06 64 63 3d 67 61 63 30 16 30 14 04 0b d ..dc=gac0.0... 0010: 6f 62 6a 65 63 74 43 6c 61 73 73 31 05 04 03 74 objectClass1...t 0020: 6f 70 op [rw] searchResult: "dc=gac" -> "dc=gac" >>> dnPrettyNormal: <dc=gac> => ldap_bv2dn(dc=gac,0) <= ldap_bv2dn(dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=gac)=0 <<< dnPrettyNormal: <dc=gac>, <dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x89246f0 ptr=0x89246ff end=0x8924715 len=22 0000: 30 14 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 05 04 03 74 6f 70 ...top ber_scanf fmt ([W]) ber: ber_dump: buf=0x89246f0 ptr=0x892470e end=0x8924715 len=7 0000: 00 05 04 03 74 6f 70 ....top ber_scanf fmt ({m) ber: ber_dump: buf=0x89246f0 ptr=0x8924715 end=0x8924715 len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x89246f0 ptr=0x89246f3 end=0x8924715 len=34 0000: 64 20 04 06 64 63 3d 67 61 63 00 16 30 14 04 0b d ..dc=gac..0... 0010: 6f 62 6a 65 63 74 43 6c 61 73 73 00 05 04 03 74 objectClass....t 0020: 6f 70 op => send_search_entry: conn 3 dn="dc=gac" => access_allowed: read access to "dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dnpat: [6] cn=contacts,cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dn: [7] dc=gac => acl_get: [7] matched => acl_get: [7] attr entry => acl_mask: access to entry "dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying search(=scxd) (stop) <= acl_mask: [1] mask: search(=scxd) => slap_access_allowed: read access denied by search(=scxd) => access_allowed: no more rules send_search_entry: conn 3 access to entry (dc=gac) not allowed ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 6a ...j sasl_read: want=106, got=106 0000: 52 3b c0 02 7c b2 5c d6 b8 c1 1a 03 48 02 c5 29 R;..|.\.....H..) 0010: 6c 8c 11 4d 62 3c 58 0d 55 6c 8d 93 43 4f 52 1c l..Mb<X.Ul..COR. 0020: 57 f2 80 ae 0b 13 6c 9b 20 7f c6 68 59 ab 3d e4 W.....l. ..hY.=. 0030: f0 f9 5e 0d 46 45 56 14 a1 f3 47 6e 0a 69 81 7f ..^.FEV...Gn.i.. 0040: 48 97 8a 50 84 c0 cb 7c e2 71 23 36 0b 27 8a 81 H..P...|.q#6.'.. 0050: 57 be 29 39 a1 3d 95 f1 15 8c 21 c2 f9 85 59 76 W.)9.=....!...Yv 0060: 2e da 89 1a 00 01 00 00 00 01 .......... ldap_read: want=8, got=8 0000: 30 58 02 01 03 64 53 04 0X...dS. ldap_read: want=82, got=82 0000: 0b 6f 3d 64 65 2c 64 63 3d 67 61 63 30 44 30 1d .o=de,dc=gac0D0. 0010: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0e 04 ..objectClass1.. 0020: 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 30 09 04 .organization0.. 0030: 01 6f 31 04 04 02 64 65 30 18 04 0b 64 65 73 63 .o1...de0...desc 0040: 72 69 70 74 69 6f 6e 31 09 04 07 64 65 2e 67 61 ription1...de.ga 0050: 63 2e c. ber_get_next: tag 0x30 len 88 contents: ber_dump: buf=0x89209d0 ptr=0x89209d0 end=0x8920a28 len=88 0000: 02 01 03 64 53 04 0b 6f 3d 64 65 2c 64 63 3d 67 ...dS..o=de,dc=g 0010: 61 63 30 44 30 1d 04 0b 6f 62 6a 65 63 74 43 6c ac0D0...objectCl 0020: 61 73 73 31 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 ass1...organizat 0030: 69 6f 6e 30 09 04 01 6f 31 04 04 02 64 65 30 18 ion0...o1...de0. 0040: 04 0b 64 65 73 63 72 69 70 74 69 6f 6e 31 09 04 ..description1.. 0050: 07 64 65 2e 67 61 63 2e .de.gac. read1msg: ld 0x88f5380 msgid 3 message type search-entry ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x89209d0 ptr=0x89209d3 end=0x8920a28 len=85 0000: 64 53 04 0b 6f 3d 64 65 2c 64 63 3d 67 61 63 30 dS..o=de,dc=gac0 0010: 44 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 D0...objectClass 0020: 31 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 1...organization 0030: 30 09 04 01 6f 31 04 04 02 64 65 30 18 04 0b 64 0...o1...de0...d 0040: 65 73 63 72 69 70 74 69 6f 6e 31 09 04 07 64 65 escription1...de 0050: 2e 67 61 63 2e .gac. [rw] searchResult: "o=de,dc=gac" -> "o=de,dc=gac" >>> dnPrettyNormal: <o=de,dc=gac> => ldap_bv2dn(o=de,dc=gac,0) <= ldap_bv2dn(o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(o=de,dc=gac)=0 <<< dnPrettyNormal: <o=de,dc=gac>, <o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x89209d0 ptr=0x89209e4 end=0x8920a28 len=68 0000: 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 30 ...organization0 0020: 09 04 01 6f 31 04 04 02 64 65 30 18 04 0b 64 65 ...o1...de0...de 0030: 73 63 72 69 70 74 69 6f 6e 31 09 04 07 64 65 2e scription1...de. 0040: 67 61 63 2e gac. ber_scanf fmt ([W]) ber: ber_dump: buf=0x89209d0 ptr=0x89209f3 end=0x8920a28 len=53 0000: 00 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e ....organization 0010: 30 09 04 01 6f 31 04 04 02 64 65 30 18 04 0b 64 0...o1...de0...d 0020: 65 73 63 72 69 70 74 69 6f 6e 31 09 04 07 64 65 escription1...de 0030: 2e 67 61 63 2e .gac. ber_scanf fmt ({m) ber: ber_dump: buf=0x89209d0 ptr=0x8920a03 end=0x8920a28 len=37 0000: 30 09 04 01 6f 31 04 04 02 64 65 30 18 04 0b 64 0...o1...de0...d 0010: 65 73 63 72 69 70 74 69 6f 6e 31 09 04 07 64 65 escription1...de 0020: 2e 67 61 63 2e .gac. ber_scanf fmt ([W]) ber: ber_dump: buf=0x89209d0 ptr=0x8920a08 end=0x8920a28 len=32 0000: 00 04 04 02 64 65 30 18 04 0b 64 65 73 63 72 69 ....de0...descri 0010: 70 74 69 6f 6e 31 09 04 07 64 65 2e 67 61 63 2e ption1...de.gac. ber_scanf fmt ({m) ber: ber_dump: buf=0x89209d0 ptr=0x8920a0e end=0x8920a28 len=26 0000: 30 18 04 0b 64 65 73 63 72 69 70 74 69 6f 6e 31 0...description1 0010: 09 04 07 64 65 2e 67 61 63 2e ...de.gac. ber_scanf fmt ([W]) ber: ber_dump: buf=0x89209d0 ptr=0x8920a1d end=0x8920a28 len=11 0000: 00 09 04 07 64 65 2e 67 61 63 2e ....de.gac. ber_scanf fmt ({m) ber: ber_dump: buf=0x89209d0 ptr=0x8920a28 end=0x8920a28 len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x89209d0 ptr=0x89209d3 end=0x8920a28 len=85 0000: 64 53 04 0b 6f 3d 64 65 2c 64 63 3d 67 61 63 00 dS..o=de,dc=gac. 0010: 44 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 D0...objectClass 0020: 00 0e 04 0c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e ....organization 0030: 30 09 04 01 6f 00 04 04 02 64 65 30 18 04 0b 64 0...o....de0...d 0040: 65 73 63 72 69 70 74 69 6f 6e 00 09 04 07 64 65 escription....de 0050: 2e 67 61 63 2e .gac. => send_search_entry: conn 3 dn="o=de,dc=gac" => access_allowed: read access to "o=de,dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dnpat: [6] cn=contacts,cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => dn: [7] dc=gac => acl_get: [7] matched => acl_get: [7] attr entry => acl_mask: access to entry "o=de,dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying search(=scxd) (stop) <= acl_mask: [1] mask: search(=scxd) => slap_access_allowed: read access denied by search(=scxd) => access_allowed: no more rules send_search_entry: conn 3 access to entry (o=de,dc=gac) not allowed ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 99 .... sasl_read: want=153, got=153 0000: b1 6f c7 5b a9 ac c5 68 79 16 5a f6 1f dd 67 98 .o.[...hy.Z...g. 0010: da d3 ce ae b5 2f 65 1d df 64 48 63 f7 e6 34 72 ...../e..dHc..4r 0020: 99 f1 a8 48 e3 60 b5 e7 2b 95 e0 5e 26 f3 ac cc ...H.`..+..^&... 0030: f6 f5 e8 af 29 68 f5 42 6b 14 69 25 46 28 92 0f ....)h.Bk.i%F(.. 0040: 71 b4 5b 67 f8 2d ae 29 a3 07 05 a4 19 2e 25 f5 q.[g.-.)......%. 0050: ff 99 9d 27 f7 37 b0 88 2b fd 81 a3 d8 ef 3d d8 ...'.7..+.....=. 0060: 69 36 0b 0e 92 a0 5b ba 67 ee 3d 07 72 77 9e 28 i6....[.g.=.rw.( 0070: 80 56 1f e2 fc b1 11 70 8f 74 d8 b6 ad 2c 92 d0 .V.....p.t...,.. 0080: 9a 75 96 aa e9 50 57 82 6c 56 aa 89 db 86 fd 95 .u...PW.lV...... 0090: b9 9e cd 00 01 00 00 00 02 ......... ldap_read: want=8, got=8 0000: 30 81 86 02 01 03 64 81 0.....d. ldap_read: want=129, got=129 0000: 80 04 13 63 6e 3d 55 73 65 72 2c 6f 3d 64 65 2c ...cn=User,o=de, 0010: 64 63 3d 67 61 63 30 69 30 1e 04 0b 6f 62 6a 65 dc=gac0i0...obje 0020: 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e 65 74 4f ctClass1...inetO 0030: 72 67 50 65 72 73 6f 6e 30 0c 04 02 63 6e 31 06 rgPerson0...cn1. 0040: 04 04 55 73 65 72 30 0c 04 02 73 6e 31 06 04 04 ..User0...sn1... 0050: 55 73 65 72 30 13 04 09 67 69 76 65 6e 4e 61 6d User0...givenNam 0060: 65 31 06 04 04 55 73 65 72 30 16 04 0c 75 73 65 e1...User0...use 0070: 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 61 73 rPassword1...pas 0080: 73 s ber_get_next: tag 0x30 len 134 contents: ber_dump: buf=0x8920ac0 ptr=0x8920ac0 end=0x8920b46 len=134 0000: 02 01 03 64 81 80 04 13 63 6e 3d 55 73 65 72 2c ...d....cn=User, 0010: 6f 3d 64 65 2c 64 63 3d 67 61 63 30 69 30 1e 04 o=de,dc=gac0i0.. 0020: 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 0d .objectClass1... 0030: 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0c 04 inetOrgPerson0.. 0040: 02 63 6e 31 06 04 04 55 73 65 72 30 0c 04 02 73 .cn1...User0...s 0050: 6e 31 06 04 04 55 73 65 72 30 13 04 09 67 69 76 n1...User0...giv 0060: 65 6e 4e 61 6d 65 31 06 04 04 55 73 65 72 30 16 enName1...User0. 0070: 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 ..userPassword1. 0080: 04 04 70 61 73 73 ..pass read1msg: ld 0x88f5380 msgid 3 message type search-entry ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b46 len=131 0000: 64 81 80 04 13 63 6e 3d 55 73 65 72 2c 6f 3d 64 d....cn=User,o=d 0010: 65 2c 64 63 3d 67 61 63 30 69 30 1e 04 0b 6f 62 e,dc=gac0i0...ob 0020: 6a 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e 65 jectClass1...ine 0030: 74 4f 72 67 50 65 72 73 6f 6e 30 0c 04 02 63 6e tOrgPerson0...cn 0040: 31 06 04 04 55 73 65 72 30 0c 04 02 73 6e 31 06 1...User0...sn1. 0050: 04 04 55 73 65 72 30 13 04 09 67 69 76 65 6e 4e ..User0...givenN 0060: 61 6d 65 31 06 04 04 55 73 65 72 30 16 04 0c 75 ame1...User0...u 0070: 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 serPassword1...p 0080: 61 73 73 ass [rw] searchResult: "cn=User,o=de,dc=gac" -> "cn=User,o=de,dc=gac" >>> dnPrettyNormal: <cn=User,o=de,dc=gac> => ldap_bv2dn(cn=User,o=de,dc=gac,0) <= ldap_bv2dn(cn=User,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=User,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user,o=de,dc=gac)=0 <<< dnPrettyNormal: <cn=User,o=de,dc=gac>, <cn=user,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920add end=0x8920b46 len=105 0000: 30 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e ...inetOrgPerson 0020: 30 0c 04 02 63 6e 31 06 04 04 55 73 65 72 30 0c 0...cn1...User0. 0030: 04 02 73 6e 31 06 04 04 55 73 65 72 30 13 04 09 ..sn1...User0... 0040: 67 69 76 65 6e 4e 61 6d 65 31 06 04 04 55 73 65 givenName1...Use 0050: 72 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 r0...userPasswor 0060: 64 31 06 04 04 70 61 73 73 d1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920aec end=0x8920b46 len=90 0000: 00 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f ....inetOrgPerso 0010: 6e 30 0c 04 02 63 6e 31 06 04 04 55 73 65 72 30 n0...cn1...User0 0020: 0c 04 02 73 6e 31 06 04 04 55 73 65 72 30 13 04 ...sn1...User0.. 0030: 09 67 69 76 65 6e 4e 61 6d 65 31 06 04 04 55 73 .givenName1...Us 0040: 65 72 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f er0...userPasswo 0050: 72 64 31 06 04 04 70 61 73 73 rd1...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920afd end=0x8920b46 len=73 0000: 30 0c 04 02 63 6e 31 06 04 04 55 73 65 72 30 0c 0...cn1...User0. 0010: 04 02 73 6e 31 06 04 04 55 73 65 72 30 13 04 09 ..sn1...User0... 0020: 67 69 76 65 6e 4e 61 6d 65 31 06 04 04 55 73 65 givenName1...Use 0030: 72 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 r0...userPasswor 0040: 64 31 06 04 04 70 61 73 73 d1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b03 end=0x8920b46 len=67 0000: 00 06 04 04 55 73 65 72 30 0c 04 02 73 6e 31 06 ....User0...sn1. 0010: 04 04 55 73 65 72 30 13 04 09 67 69 76 65 6e 4e ..User0...givenN 0020: 61 6d 65 31 06 04 04 55 73 65 72 30 16 04 0c 75 ame1...User0...u 0030: 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 serPassword1...p 0040: 61 73 73 ass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b0b end=0x8920b46 len=59 0000: 30 0c 04 02 73 6e 31 06 04 04 55 73 65 72 30 13 0...sn1...User0. 0010: 04 09 67 69 76 65 6e 4e 61 6d 65 31 06 04 04 55 ..givenName1...U 0020: 73 65 72 30 16 04 0c 75 73 65 72 50 61 73 73 77 ser0...userPassw 0030: 6f 72 64 31 06 04 04 70 61 73 73 ord1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b11 end=0x8920b46 len=53 0000: 00 06 04 04 55 73 65 72 30 13 04 09 67 69 76 65 ....User0...give 0010: 6e 4e 61 6d 65 31 06 04 04 55 73 65 72 30 16 04 nName1...User0.. 0020: 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 .userPassword1.. 0030: 04 70 61 73 73 .pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b19 end=0x8920b46 len=45 0000: 30 13 04 09 67 69 76 65 6e 4e 61 6d 65 31 06 04 0...givenName1.. 0010: 04 55 73 65 72 30 16 04 0c 75 73 65 72 50 61 73 .User0...userPas 0020: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b26 end=0x8920b46 len=32 0000: 00 06 04 04 55 73 65 72 30 16 04 0c 75 73 65 72 ....User0...user 0010: 50 61 73 73 77 6f 72 64 31 06 04 04 70 61 73 73 Password1...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b2e end=0x8920b46 len=24 0000: 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 0...userPassword 0010: 31 06 04 04 70 61 73 73 1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b3e end=0x8920b46 len=8 0000: 00 06 04 04 70 61 73 73 ....pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b46 end=0x8920b46 len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b46 len=131 0000: 64 81 80 04 13 63 6e 3d 55 73 65 72 2c 6f 3d 64 d....cn=User,o=d 0010: 65 2c 64 63 3d 67 61 63 00 69 30 1e 04 0b 6f 62 e,dc=gac.i0...ob 0020: 6a 65 63 74 43 6c 61 73 73 00 0f 04 0d 69 6e 65 jectClass....ine 0030: 74 4f 72 67 50 65 72 73 6f 6e 30 0c 04 02 63 6e tOrgPerson0...cn 0040: 00 06 04 04 55 73 65 72 30 0c 04 02 73 6e 00 06 ....User0...sn.. 0050: 04 04 55 73 65 72 30 13 04 09 67 69 76 65 6e 4e ..User0...givenN 0060: 61 6d 65 00 06 04 04 55 73 65 72 30 16 04 0c 75 ame....User0...u 0070: 73 65 72 50 61 73 73 77 6f 72 64 00 06 04 04 70 serPassword....p 0080: 61 73 73 ass => send_search_entry: conn 3 dn="cn=User,o=de,dc=gac" => access_allowed: read access to "cn=User,o=de,dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr entry => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User,o=de,dc=gac" "objectClass" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr objectClass => slap_access_allowed: result not in cache (objectClass) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "objectClass" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User,o=de,dc=gac" "cn" requested => dn: [1] => acl_get: [3] attr cn => slap_access_allowed: result not in cache (cn) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "cn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User,o=de,dc=gac" "sn" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => acl_get: [4] attr sn => slap_access_allowed: result not in cache (sn) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "sn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: self <= check a_set_pat: [cn=contacts,cn=$1,o=$2,dc=gac]/member => acl_string_expand: pattern: [cn=contacts,cn=$1,o=$2,dc=gac]/member => acl_string_expand: expanded: [cn=contacts,cn=user,o=de,dc=gac]/member >>> dnNormalize: <cn=contacts,cn=user,o=de,dc=gac> => ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac,0) <= ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=contacts,cn=user,o=de,dc=gac)=0 <<< dnNormalize: <cn=contacts,cn=user,o=de,dc=gac> <= check a_dn_pat: * <= acl_mask: [3] applying auth(=xd) (stop) <= acl_mask: [3] mask: auth(=xd) => slap_access_allowed: read access denied by auth(=xd) => access_allowed: no more rules send_search_entry: conn 3 access to attribute sn, value #0 not allowed => access_allowed: read access to "cn=User,o=de,dc=gac" "givenName" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => acl_get: [4] attr givenName => slap_access_allowed: result not in cache (givenName) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "givenName" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: self <= check a_set_pat: [cn=contacts,cn=$1,o=$2,dc=gac]/member => acl_string_expand: pattern: [cn=contacts,cn=$1,o=$2,dc=gac]/member => acl_string_expand: expanded: [cn=contacts,cn=user,o=de,dc=gac]/member >>> dnNormalize: <cn=contacts,cn=user,o=de,dc=gac> => ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac,0) <= ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=contacts,cn=user,o=de,dc=gac)=0 <<< dnNormalize: <cn=contacts,cn=user,o=de,dc=gac> <= check a_dn_pat: * <= acl_mask: [3] applying auth(=xd) (stop) <= acl_mask: [3] mask: auth(=xd) => slap_access_allowed: read access denied by auth(=xd) => access_allowed: no more rules send_search_entry: conn 3 access to attribute givenName, value #0 not allowed => access_allowed: read access to "cn=User,o=de,dc=gac" "userPassword" requested => dn: [1] => acl_get: [2] attr userPassword => slap_access_allowed: result not in cache (userPassword) => acl_mask: access to entry "cn=User,o=de,dc=gac", attr "userPassword" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: cn=datadmin,dc=gac <= check a_dn_pat: * <= acl_mask: [2] applying auth(=xd) (stop) <= acl_mask: [2] mask: auth(=xd) => slap_access_allowed: read access denied by auth(=xd) => access_allowed: no more rules send_search_entry: conn 3 access to attribute userPassword, value #0 not allowed ber_flush2: 76 bytes to sd 11 0000: 30 4a 02 01 03 64 45 04 13 63 6e 3d 55 73 65 72 0J...dE..cn=User 0010: 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 2e 30 1e ,o=de,dc=gac0.0. 0020: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 ..objectClass1.. 0030: 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0c .inetOrgPerson0. 0040: 04 02 63 6e 31 06 04 04 55 73 65 72 ..cn1...User sasl_write: want=96, written=96 0000: 00 00 00 5c 83 c6 63 35 c7 67 8b fa d8 28 bd db ...\..c5.g...(.. 0010: 48 09 37 6e ca 1c 8e b7 c6 09 d3 e9 21 3c 86 a2 H.7n........!<.. 0020: 2f bd 2d 46 68 ae b7 54 5d 29 47 56 09 b0 47 43 /.-Fh..T])GV..GC 0030: 6c f5 e3 f3 6e 4c 2f 54 9f 5a 7d ac 0d 54 6d 1d l...nL/T.Z}..Tm. 0040: bb e1 46 c4 26 1f 30 7e 8c 45 16 e0 66 91 3d 9c ..F.&.0~.E..f.=. 0050: 44 c3 e3 1e a5 bf 62 93 ee 46 00 01 00 00 00 00 D.....b..F...... ldap_write: want=76, written=76 0000: 30 4a 02 01 03 64 45 04 13 63 6e 3d 55 73 65 72 0J...dE..cn=User 0010: 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 2e 30 1e ,o=de,dc=gac0.0. 0020: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 ..objectClass1.. 0030: 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0c .inetOrgPerson0. 0040: 04 02 63 6e 31 06 04 04 55 73 65 72 ..cn1...User conn=3 op=2 ENTRY dn="cn=user,o=de,dc=gac" <= send_search_entry: conn 3 exit. ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 9d .... sasl_read: want=157, got=157 0000: a4 f4 34 99 30 66 35 e2 21 a3 ee 0d e3 2e 5c fd ..4.0f5.!.....\. 0010: 63 81 96 e0 1e 06 e3 11 8c 51 3c 76 6a 3d 32 bd c........Q<vj=2. 0020: 84 4d 6a fe 8c 53 fd 9c c9 b5 29 51 ea 7c c7 24 .Mj..S....)Q.|.$ 0030: 4d ca fe 7d 91 47 5e 95 6b 39 d5 c3 2b 47 ab 5b M..}.G^.k9..+G.[ 0040: f6 c7 b4 af 75 ca 6c 6a fb fc 84 78 c2 d4 25 4b ....u.lj...x..%K 0050: 32 ea ea 5c 2f 79 61 5d 72 69 2a 3f 72 1f f6 07 2..\/ya]ri*?r... 0060: 80 22 8b b9 4f c6 94 58 b2 a1 cd 2c c7 cc bc 30 ."..O..X...,...0 0070: 86 73 90 62 35 93 c2 b4 60 b2 cf 2a 7d 8f db e6 .s.b5...`..*}... 0080: 01 f9 88 e7 a5 81 a3 d0 6d 93 24 08 a2 27 68 f1 ........m.$..'h. 0090: b6 f8 d4 84 73 92 17 00 01 00 00 00 03 ....s........ ldap_read: want=8, got=8 0000: 30 81 8a 02 01 03 64 81 0.....d. ldap_read: want=133, got=133 0000: 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d 64 65 ...cn=User2,o=de 0010: 2c 64 63 3d 67 61 63 30 6c 30 1e 04 0b 6f 62 6a ,dc=gac0l0...obj 0020: 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e 65 74 ectClass1...inet 0030: 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 6e 31 OrgPerson0...cn1 0040: 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e 31 07 ...User20...sn1. 0050: 04 05 55 73 65 72 32 30 14 04 09 67 69 76 65 6e ..User20...given 0060: 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 16 04 Name1...User20.. 0070: 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 04 .userPassword1.. 0080: 04 70 61 73 73 .pass ber_get_next: tag 0x30 len 138 contents: ber_dump: buf=0x8920ac0 ptr=0x8920ac0 end=0x8920b4a len=138 0000: 02 01 03 64 81 84 04 14 63 6e 3d 55 73 65 72 32 ...d....cn=User2 0010: 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 6c 30 1e ,o=de,dc=gac0l0. 0020: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 ..objectClass1.. 0030: 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d .inetOrgPerson0. 0040: 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0d 04 ..cn1...User20.. 0050: 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 04 09 .sn1...User20... 0060: 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 givenName1...Use 0070: 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f r20...userPasswo 0080: 72 64 31 06 04 04 70 61 73 73 rd1...pass read1msg: ld 0x88f5380 msgid 3 message type search-entry ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b4a len=135 0000: 64 81 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d d....cn=User2,o= 0010: 64 65 2c 64 63 3d 67 61 63 30 6c 30 1e 04 0b 6f de,dc=gac0l0...o 0020: 62 6a 65 63 74 43 6c 61 73 73 31 0f 04 0d 69 6e bjectClass1...in 0030: 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 etOrgPerson0...c 0040: 6e 31 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e n1...User20...sn 0050: 31 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 1...User20...giv 0060: 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 enName1...User20 0070: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 ...userPassword1 0080: 06 04 04 70 61 73 73 ...pass [rw] searchResult: "cn=User2,o=de,dc=gac" -> "cn=User2,o=de,dc=gac" >>> dnPrettyNormal: <cn=User2,o=de,dc=gac> => ldap_bv2dn(cn=User2,o=de,dc=gac,0) <= ldap_bv2dn(cn=User2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=User2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnPrettyNormal: <cn=User2,o=de,dc=gac>, <cn=user2,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ade end=0x8920b4a len=108 0000: 30 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e ...inetOrgPerson 0020: 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0...cn1...User20 0030: 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 ...sn1...User20. 0040: 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 ..givenName1...U 0050: 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 ser20...userPass 0060: 77 6f 72 64 31 06 04 04 70 61 73 73 word1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920aed end=0x8920b4a len=93 0000: 00 0f 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f ....inetOrgPerso 0010: 6e 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 n0...cn1...User2 0020: 30 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 0...sn1...User20 0030: 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 ...givenName1... 0040: 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 User20...userPas 0050: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920afe end=0x8920b4a len=76 0000: 30 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0...cn1...User20 0010: 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 ...sn1...User20. 0020: 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 ..givenName1...U 0030: 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 73 ser20...userPass 0040: 77 6f 72 64 31 06 04 04 70 61 73 73 word1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b04 end=0x8920b4a len=70 0000: 00 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e 31 ....User20...sn1 0010: 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 65 ...User20...give 0020: 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 16 nName1...User20. 0030: 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 06 ..userPassword1. 0040: 04 04 70 61 73 73 ..pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b0d end=0x8920b4a len=61 0000: 30 0d 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 0...sn1...User20 0010: 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 ...givenName1... 0020: 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 73 User20...userPas 0030: 73 77 6f 72 64 31 06 04 04 70 61 73 73 sword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b13 end=0x8920b4a len=55 0000: 00 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 ....User20...giv 0010: 65 6e 4e 61 6d 65 31 07 04 05 55 73 65 72 32 30 enName1...User20 0020: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 31 ...userPassword1 0030: 06 04 04 70 61 73 73 ...pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b1c end=0x8920b4a len=46 0000: 30 14 04 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 0...givenName1.. 0010: 05 55 73 65 72 32 30 16 04 0c 75 73 65 72 50 61 .User20...userPa 0020: 73 73 77 6f 72 64 31 06 04 04 70 61 73 73 ssword1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b29 end=0x8920b4a len=33 0000: 00 07 04 05 55 73 65 72 32 30 16 04 0c 75 73 65 ....User20...use 0010: 72 50 61 73 73 77 6f 72 64 31 06 04 04 70 61 73 rPassword1...pas 0020: 73 s ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b32 end=0x8920b4a len=24 0000: 30 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 0...userPassword 0010: 31 06 04 04 70 61 73 73 1...pass ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b42 end=0x8920b4a len=8 0000: 00 06 04 04 70 61 73 73 ....pass ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b4a end=0x8920b4a len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b4a len=135 0000: 64 81 84 04 14 63 6e 3d 55 73 65 72 32 2c 6f 3d d....cn=User2,o= 0010: 64 65 2c 64 63 3d 67 61 63 00 6c 30 1e 04 0b 6f de,dc=gac.l0...o 0020: 62 6a 65 63 74 43 6c 61 73 73 00 0f 04 0d 69 6e bjectClass....in 0030: 65 74 4f 72 67 50 65 72 73 6f 6e 30 0d 04 02 63 etOrgPerson0...c 0040: 6e 00 07 04 05 55 73 65 72 32 30 0d 04 02 73 6e n....User20...sn 0050: 00 07 04 05 55 73 65 72 32 30 14 04 09 67 69 76 ....User20...giv 0060: 65 6e 4e 61 6d 65 00 07 04 05 55 73 65 72 32 30 enName....User20 0070: 16 04 0c 75 73 65 72 50 61 73 73 77 6f 72 64 00 ...userPassword. 0080: 06 04 04 70 61 73 73 ...pass => send_search_entry: conn 3 dn="cn=User2,o=de,dc=gac" => access_allowed: read access to "cn=User2,o=de,dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr entry => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "objectClass" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr objectClass => slap_access_allowed: result not in cache (objectClass) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "objectClass" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "cn" requested => dn: [1] => acl_get: [3] attr cn => slap_access_allowed: result not in cache (cn) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "cn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "sn" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => acl_get: [4] attr sn => slap_access_allowed: result not in cache (sn) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "sn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: self <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "givenName" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => acl_get: [4] attr givenName => slap_access_allowed: result not in cache (givenName) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "givenName" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: self <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=User2,o=de,dc=gac" "userPassword" requested => dn: [1] => acl_get: [2] attr userPassword => slap_access_allowed: result not in cache (userPassword) => acl_mask: access to entry "cn=User2,o=de,dc=gac", attr "userPassword" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: cn=datadmin,dc=gac <= check a_dn_pat: * <= acl_mask: [2] applying auth(=xd) (stop) <= acl_mask: [2] mask: auth(=xd) => slap_access_allowed: read access denied by auth(=xd) => access_allowed: no more rules send_search_entry: conn 3 access to attribute userPassword, value #0 not allowed ber_flush2: 115 bytes to sd 11 0000: 30 71 02 01 03 64 6c 04 14 63 6e 3d 55 73 65 72 0q...dl..cn=User 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 54 30 2,o=de,dc=gac0T0 0020: 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f ...objectClass1. 0030: 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 ..inetOrgPerson0 0040: 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0d ...cn1...User20. 0050: 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 04 ..sn1...User20.. 0060: 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 73 .givenName1...Us 0070: 65 72 32 er2 sasl_write: want=135, written=135 0000: 00 00 00 83 4a 39 19 4f 93 38 d0 77 d0 bb 08 7f ....J9.O.8.w.... 0010: 49 18 1c 59 d7 a5 a3 ca b2 dd 90 83 5f fe 1d 0f I..Y........_... 0020: bc 35 66 33 a0 7b d3 01 02 70 3a 19 8e af 7c 7d .5f3.{...p:...|} 0030: 8b 79 7e 27 8e 4d f5 61 65 36 6a df ee 0a 8e 62 .y~'.M.ae6j....b 0040: 18 6e e7 75 1d 22 b7 98 3d 63 0a 29 e5 63 6f e5 .n.u."..=c.).co. 0050: 77 97 ef 02 65 d2 3e 7d da 21 24 d8 42 d5 86 39 w...e.>}.!$.B..9 0060: dc f6 79 f3 b5 bd 42 c3 90 f1 8d c8 da bc 68 99 ..y...B.......h. 0070: b0 88 7c 1f cf b6 93 18 8d f4 af 65 e5 57 98 8b ..|........e.W.. 0080: 13 00 01 00 00 00 01 ....... ldap_write: want=115, written=115 0000: 30 71 02 01 03 64 6c 04 14 63 6e 3d 55 73 65 72 0q...dl..cn=User 0010: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 30 54 30 2,o=de,dc=gac0T0 0020: 1e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0f ...objectClass1. 0030: 04 0d 69 6e 65 74 4f 72 67 50 65 72 73 6f 6e 30 ..inetOrgPerson0 0040: 0d 04 02 63 6e 31 07 04 05 55 73 65 72 32 30 0d ...cn1...User20. 0050: 04 02 73 6e 31 07 04 05 55 73 65 72 32 30 14 04 ..sn1...User20.. 0060: 09 67 69 76 65 6e 4e 61 6d 65 31 07 04 05 55 73 .givenName1...Us 0070: 65 72 32 er2 conn=3 op=2 ENTRY dn="cn=user2,o=de,dc=gac" <= send_search_entry: conn 3 exit. ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 8d .... sasl_read: want=141, got=141 0000: f4 db 84 c1 97 c3 cb 7b cd b0 23 ed 24 6b 4e 4d .......{..#.$kNM 0010: 61 83 7b 94 17 4e f6 e3 df 53 aa bb e6 f4 b2 b1 a.{..N...S...... 0020: 0d d6 7e 75 33 9a ed 9d 87 af c4 f8 66 66 de 7e ..~u3.......ff.~ 0030: c8 e8 58 c7 9e c2 eb 0c 74 53 eb b2 56 8c 20 90 ..X.....tS..V. . 0040: dd 3d cb 16 f8 bd db a0 6d 3a 3e cf f5 f2 05 4d .=......m:>....M 0050: 61 cc 11 9f 3c 83 57 cd 08 95 2c 1e 0d 8e 05 74 a...<.W...,....t 0060: 02 90 00 e8 ec db 36 ac 17 01 dd 2a 78 c4 72 57 ......6....*x.rW 0070: 7b 30 4b a5 90 93 e3 c8 74 20 4f 2a 4a 86 24 89 {0K.....t O*J.$. 0080: 45 a9 0b 19 28 52 96 00 01 00 00 00 04 E...(R....... ldap_read: want=8, got=8 0000: 30 7b 02 01 03 64 76 04 0{...dv. ldap_read: want=117, got=117 0000: 1f 63 6e 3d 63 6f 6e 74 61 63 74 73 2c 63 6e 3d .cn=contacts,cn= 0010: 75 73 65 72 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 user,o=de,dc=gac 0020: 30 53 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 0S0...objectClas 0030: 73 31 0e 04 0c 67 72 6f 75 70 4f 66 4e 61 6d 65 s1...groupOfName 0040: 73 30 10 04 02 63 6e 31 0a 04 08 63 6f 6e 74 61 s0...cn1...conta 0050: 63 74 73 30 20 04 06 6d 65 6d 62 65 72 31 16 04 cts0 ..member1.. 0060: 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 .cn=user2,o=de,d 0070: 63 3d 67 61 63 c=gac ber_get_next: tag 0x30 len 123 contents: ber_dump: buf=0x8920ac0 ptr=0x8920ac0 end=0x8920b3b len=123 0000: 02 01 03 64 76 04 1f 63 6e 3d 63 6f 6e 74 61 63 ...dv..cn=contac 0010: 74 73 2c 63 6e 3d 75 73 65 72 2c 6f 3d 64 65 2c ts,cn=user,o=de, 0020: 64 63 3d 67 61 63 30 53 30 1d 04 0b 6f 62 6a 65 dc=gac0S0...obje 0030: 63 74 43 6c 61 73 73 31 0e 04 0c 67 72 6f 75 70 ctClass1...group 0040: 4f 66 4e 61 6d 65 73 30 10 04 02 63 6e 31 0a 04 OfNames0...cn1.. 0050: 08 63 6f 6e 74 61 63 74 73 30 20 04 06 6d 65 6d .contacts0 ..mem 0060: 62 65 72 31 16 04 14 63 6e 3d 75 73 65 72 32 2c ber1...cn=user2, 0070: 6f 3d 64 65 2c 64 63 3d 67 61 63 o=de,dc=gac read1msg: ld 0x88f5380 msgid 3 message type search-entry ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 100000 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: * msgid 3, type 100 ld 0x88f5380 response count 1 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 msgid 3, type 0x64 ber_scanf fmt ({m{) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b3b len=120 0000: 64 76 04 1f 63 6e 3d 63 6f 6e 74 61 63 74 73 2c dv..cn=contacts, 0010: 63 6e 3d 75 73 65 72 2c 6f 3d 64 65 2c 64 63 3d cn=user,o=de,dc= 0020: 67 61 63 30 53 30 1d 04 0b 6f 62 6a 65 63 74 43 gac0S0...objectC 0030: 6c 61 73 73 31 0e 04 0c 67 72 6f 75 70 4f 66 4e lass1...groupOfN 0040: 61 6d 65 73 30 10 04 02 63 6e 31 0a 04 08 63 6f ames0...cn1...co 0050: 6e 74 61 63 74 73 30 20 04 06 6d 65 6d 62 65 72 ntacts0 ..member 0060: 31 16 04 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 1...cn=user2,o=d 0070: 65 2c 64 63 3d 67 61 63 e,dc=gac [rw] searchResult: "cn=contacts,cn=user,o=de,dc=gac" -> "cn=contacts,cn=user,o=de,dc=gac" >>> dnPrettyNormal: <cn=contacts,cn=user,o=de,dc=gac> => ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac,0) <= ldap_bv2dn(cn=contacts,cn=user,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=contacts,cn=user,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=contacts,cn=user,o=de,dc=gac)=0 <<< dnPrettyNormal: <cn=contacts,cn=user,o=de,dc=gac>, <cn=contacts,cn=user,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ae8 end=0x8920b3b len=83 0000: 30 1d 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0010: 0e 04 0c 67 72 6f 75 70 4f 66 4e 61 6d 65 73 30 ...groupOfNames0 0020: 10 04 02 63 6e 31 0a 04 08 63 6f 6e 74 61 63 74 ...cn1...contact 0030: 73 30 20 04 06 6d 65 6d 62 65 72 31 16 04 14 63 s0 ..member1...c 0040: 6e 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 63 3d n=user2,o=de,dc= 0050: 67 61 63 gac ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920af7 end=0x8920b3b len=68 0000: 00 0e 04 0c 67 72 6f 75 70 4f 66 4e 61 6d 65 73 ....groupOfNames 0010: 30 10 04 02 63 6e 31 0a 04 08 63 6f 6e 74 61 63 0...cn1...contac 0020: 74 73 30 20 04 06 6d 65 6d 62 65 72 31 16 04 14 ts0 ..member1... 0030: 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 63 cn=user2,o=de,dc 0040: 3d 67 61 63 =gac ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b07 end=0x8920b3b len=52 0000: 30 10 04 02 63 6e 31 0a 04 08 63 6f 6e 74 61 63 0...cn1...contac 0010: 74 73 30 20 04 06 6d 65 6d 62 65 72 31 16 04 14 ts0 ..member1... 0020: 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 63 cn=user2,o=de,dc 0030: 3d 67 61 63 =gac ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b0d end=0x8920b3b len=46 0000: 00 0a 04 08 63 6f 6e 74 61 63 74 73 30 20 04 06 ....contacts0 .. 0010: 6d 65 6d 62 65 72 31 16 04 14 63 6e 3d 75 73 65 member1...cn=use 0020: 72 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 r2,o=de,dc=gac ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b19 end=0x8920b3b len=34 0000: 30 20 04 06 6d 65 6d 62 65 72 31 16 04 14 63 6e 0 ..member1...cn 0010: 3d 75 73 65 72 32 2c 6f 3d 64 65 2c 64 63 3d 67 =user2,o=de,dc=g 0020: 61 63 ac ber_scanf fmt ([W]) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b23 end=0x8920b3b len=24 0000: 00 16 04 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 ....cn=user2,o=d 0010: 65 2c 64 63 3d 67 61 63 e,dc=gac [rw] searchAttrDN: "cn=user2,o=de,dc=gac" -> "cn=user2,o=de,dc=gac" >>> dnPretty: <cn=user2,o=de,dc=gac> => ldap_bv2dn(cn=user2,o=de,dc=gac,0) <= ldap_bv2dn(cn=user2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnPretty: <cn=user2,o=de,dc=gac> >>> dnNormalize: <cn=user2,o=de,dc=gac> => ldap_bv2dn(cn=user2,o=de,dc=gac,0) <= ldap_bv2dn(cn=user2,o=de,dc=gac)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=user2,o=de,dc=gac)=0 <<< dnNormalize: <cn=user2,o=de,dc=gac> ber_scanf fmt ({m) ber: ber_dump: buf=0x8920ac0 ptr=0x8920b3b end=0x8920b3b len=0 ber_scanf fmt ({xx) ber: ber_dump: buf=0x8920ac0 ptr=0x8920ac3 end=0x8920b3b len=120 0000: 64 76 04 1f 63 6e 3d 63 6f 6e 74 61 63 74 73 2c dv..cn=contacts, 0010: 63 6e 3d 75 73 65 72 2c 6f 3d 64 65 2c 64 63 3d cn=user,o=de,dc= 0020: 67 61 63 00 53 30 1d 04 0b 6f 62 6a 65 63 74 43 gac.S0...objectC 0030: 6c 61 73 73 00 0e 04 0c 67 72 6f 75 70 4f 66 4e lass....groupOfN 0040: 61 6d 65 73 30 10 04 02 63 6e 00 0a 04 08 63 6f ames0...cn....co 0050: 6e 74 61 63 74 73 30 20 04 06 6d 65 6d 62 65 72 ntacts0 ..member 0060: 00 16 04 14 63 6e 3d 75 73 65 72 32 2c 6f 3d 64 ....cn=user2,o=d 0070: 65 2c 64 63 3d 67 61 63 e,dc=gac => send_search_entry: conn 3 dn="cn=contacts,cn=user,o=de,dc=gac" => access_allowed: read access to "cn=contacts,cn=user,o=de,dc=gac" "entry" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr entry => match[0]: 12 31 cn=user,o=de,dc=gac => match[1]: 15 19 user => match[2]: 22 24 de => acl_mask: access to entry "cn=contacts,cn=user,o=de,dc=gac", attr "entry" requested => acl_mask: to all values by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=contacts,cn=user,o=de,dc=gac" "objectClass" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr objectClass => match[0]: 12 31 cn=user,o=de,dc=gac => match[1]: 15 19 user => match[2]: 22 24 de => slap_access_allowed: result not in cache (objectClass) => acl_mask: access to entry "cn=contacts,cn=user,o=de,dc=gac", attr "objectClass" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=contacts,cn=user,o=de,dc=gac" "cn" requested => dn: [1] => acl_get: [3] attr cn => slap_access_allowed: result not in cache (cn) => acl_mask: access to entry "cn=contacts,cn=user,o=de,dc=gac", attr "cn" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) => access_allowed: read access to "cn=contacts,cn=user,o=de,dc=gac" "member" requested => dn: [1] => dnpat: [4] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [4] matched => dnpat: [5] cn=([^,]*),o=([^,]*),dc=gac nsub: 2 => acl_get: [5] matched => acl_get: [5] attr member => match[0]: 12 31 cn=user,o=de,dc=gac => match[1]: 15 19 user => match[2]: 22 24 de => slap_access_allowed: result not in cache (member) => acl_mask: access to entry "cn=contacts,cn=user,o=de,dc=gac", attr "member" requested => acl_mask: to value by "cn=user2,o=de,dc=gac", (=0) <= check a_dn_pat: users <= acl_mask: [1] applying read(=rscxd) (stop) <= acl_mask: [1] mask: read(=rscxd) => slap_access_allowed: read access granted by read(=rscxd) => access_allowed: read access granted by read(=rscxd) ber_flush2: 125 bytes to sd 11 0000: 30 7b 02 01 03 64 76 04 1f 63 6e 3d 63 6f 6e 74 0{...dv..cn=cont 0010: 61 63 74 73 2c 63 6e 3d 75 73 65 72 2c 6f 3d 64 acts,cn=user,o=d 0020: 65 2c 64 63 3d 67 61 63 30 53 30 1d 04 0b 6f 62 e,dc=gac0S0...ob 0030: 6a 65 63 74 43 6c 61 73 73 31 0e 04 0c 67 72 6f jectClass1...gro 0040: 75 70 4f 66 4e 61 6d 65 73 30 10 04 02 63 6e 31 upOfNames0...cn1 0050: 0a 04 08 63 6f 6e 74 61 63 74 73 30 20 04 06 6d ...contacts0 ..m 0060: 65 6d 62 65 72 31 16 04 14 63 6e 3d 75 73 65 72 ember1...cn=user 0070: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 2,o=de,dc=gac sasl_write: want=145, written=145 0000: 00 00 00 8d ee 90 f3 ed 59 ee b5 ec 5f ae 3e aa ........Y..._.>. 0010: de 12 bf a5 11 0c 1d 9c 66 04 f6 0e ed e0 31 f2 ........f.....1. 0020: 69 e7 93 6a 77 87 e6 25 8b ba 32 92 e1 6a f0 ec i..jw..%..2..j.. 0030: 6a 64 5c 9e be c0 f2 0e 5e 12 9d 68 0f c2 4e 06 jd\.....^..h..N. 0040: fd 22 ee 71 ee 9f 28 85 92 75 87 72 a8 29 23 39 .".q..(..u.r.)#9 0050: 73 93 ed 45 f3 97 48 64 fe 8d 5d a0 a3 22 62 9f s..E..Hd..].."b. 0060: 21 25 e0 3b 09 1c c3 83 94 8b 42 7d 2a 20 51 3c !%.;......B}* Q< 0070: 69 11 74 cd 5e d5 e3 24 22 d5 5d 3a b1 79 df cb i.t.^..$".]:.y.. 0080: 1b cb 37 c4 09 ef ac 8c 34 78 02 00 01 00 00 00 ..7.....4x...... 0090: 02 . ldap_write: want=125, written=125 0000: 30 7b 02 01 03 64 76 04 1f 63 6e 3d 63 6f 6e 74 0{...dv..cn=cont 0010: 61 63 74 73 2c 63 6e 3d 75 73 65 72 2c 6f 3d 64 acts,cn=user,o=d 0020: 65 2c 64 63 3d 67 61 63 30 53 30 1d 04 0b 6f 62 e,dc=gac0S0...ob 0030: 6a 65 63 74 43 6c 61 73 73 31 0e 04 0c 67 72 6f jectClass1...gro 0040: 75 70 4f 66 4e 61 6d 65 73 30 10 04 02 63 6e 31 upOfNames0...cn1 0050: 0a 04 08 63 6f 6e 74 61 63 74 73 30 20 04 06 6d ...contacts0 ..m 0060: 65 6d 62 65 72 31 16 04 14 63 6e 3d 75 73 65 72 ember1...cn=user 0070: 32 2c 6f 3d 64 65 2c 64 63 3d 67 61 63 2,o=de,dc=gac conn=3 op=2 ENTRY dn="cn=contacts,cn=user,o=de,dc=gac" <= send_search_entry: conn 3 exit. ldap_msgfree ldap_result ld 0x88f5380 msgid 3 wait4msg ld 0x88f5380 msgid 3 (timeout 0 usec) wait4msg continue ld 0x88f5380 msgid 3 all 2 ** ld 0x88f5380 Connections: * host: 192.168.112.11 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 14 10:19:33 2009 ** ld 0x88f5380 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x88f5380 request count 1 (abandoned 0) ** ld 0x88f5380 Response Queue: Empty ld 0x88f5380 response count 0 ldap_chkResponseList ld 0x88f5380 msgid 3 all 2 ldap_chkResponseList returns ld 0x88f5380 NULL ldap_int_select read1msg: ld 0x88f5380 msgid 3 all 2 ber_get_next sasl_read: want=4, got=4 0000: 00 00 00 1e .... sasl_read: want=30, got=30 0000: e6 89 1d 0c cb fc a4 1b d5 c0 5e cb 22 a0 24 0f ..........^.".$. 0010: e8 02 b2 bf d3 3e 8c a9 00 01 00 00 00 05 .....>........ ldap_read: want=8, got=8 0000: 30 0c 02 01 03 65 07 0a 0....e.. ldap_read: want=6, got=6 0000: 01 00 04 00 04 00 ...... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x8920b50 ptr=0x8920b50 end=0x8920b5c len=12 0000: 02 01 03 65 07 0a 01 00 04 00 04 00 ...e........ read1msg: ld 0x88f5380 msgid 3 message type search-result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x8920b50 ptr=0x8920b53 end=0x8920b5c len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ read1msg: ld 0x88f5380 0 new referrals read1msg: mark request completed, ld 0x88f5380 msgid 3 request done: ld 0x88f5380 msgid 3 res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 3, msgid 3) ldap_free_connection 0 1 ldap_free_connection: refcnt 1 ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x8920b50 ptr=0x8920b53 end=0x8920b5c len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ ber_scanf fmt (}) ber: ber_dump: buf=0x8920b50 ptr=0x8920b5c end=0x8920b5c len=0 conn=3 op=2 meta_back_search[0] match="" err=0. ldap_msgfree send_ldap_result: conn=3 op=2 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=3 tag=101 err=0 ber_flush2: 14 bytes to sd 11 0000: 30 0c 02 01 03 65 07 0a 01 00 04 00 04 00 0....e........ sasl_write: want=34, written=34 0000: 00 00 00 1e e8 3c 38 df 4b 1c ec fb 55 92 5c 6f .....<8.K...U.\o 0010: 44 b1 7f d4 f6 72 9f 5c 9b ff e3 48 00 01 00 00 D....r.\...H.... 0020: 00 03 .. ldap_write: want=14, written=14 0000: 30 0c 02 01 03 65 07 0a 01 00 04 00 04 00 0....e........ conn=3 op=2 SEARCH RESULT tag=101 err=0 nentries=3 text= daemon: activity on 1 descriptor daemon: activity on: 11r daemon: read active on 11 daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL connection_get(11) connection_get(11): got connid=3 connection_read(11): checking for input on id=3 ber_get_next sasl_read: want=4, got=0 ldap_read: want=8, got=0 ber_get_next on fd 11 failed errno=0 (Success) connection_read(11): input error=-2 id=3, closing. connection_closing: readying conn=3 sd=11 for close connection_close: conn=3 sd=11 =>meta_back_conn_destroy: fetching conn=3 DN="cn=user2,o=de,dc=gac" =>meta_back_conn_destroy: destroying conn 3 refcnt=0 flags=0x00000100 ldap_free_connection 1 1 ldap_send_unbind ber_flush2: 7 bytes to sd 13 0000: 30 05 02 01 04 42 00 0....B. sasl_write: want=27, written=27 0000: 00 00 00 17 f0 4f 68 14 67 7c 34 5e 9f 47 43 50 .....Oh.g|4^.GCP 0010: 42 3e 0f 96 ca 00 01 00 00 00 01 B>......... ldap_write: want=7, written=7 0000: 30 05 02 01 04 42 00 0....B. ldap_free_connection: actually freed daemon: removing 11 conn=3 fd=11 closed (connection lost) daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL daemon: epoll: listen=8 active_threads=0 tvp=NULL

14 years, 6 months

2
1
0 / 0

Re: (ITS#6126) test054-syncreplication-parallel-load failed: producer and consumer databases differ

by michael＠stroeder.com

I cannot reproduce it all the time.

14 years, 6 months

1
0
0 / 0

Re: (ITS#6126) test054-syncreplication-parallel-load failed: producer and consumer databases differ

by michael＠stroeder.com

See tests/testrun/ here: http://www.stroeder.com/temp/openldap/its6126_test054-syncreplication-par...

14 years, 6 months

1
0
0 / 0

(ITS#6126) test054-syncreplication-parallel-load failed: producer and consumer databases differ

by michael＠stroeder.com

Full_Name: Michael Ströder Version: RE24 OS: openSUSE Linux 11.1 URL: Submission from: (NULL) (84.163.105.68) >>>>> Starting test054-syncreplication-parallel-load ... running defines.sh Starting producer slapd on TCP/IP port 9011... Using ldapsearch to check that producer slapd is running... Using ldapadd to create the context prefix entry in the producer... Starting consumer slapd on TCP/IP port 9014... Using ldapsearch to check that consumer slapd is running... Using ldapadd to populate the producer directory... Waiting 7 seconds for syncrepl to receive changes... Stopping the provider, sleeping 10 seconds and restarting it... Using ldapsearch to check that producer slapd is running... Waiting 10 seconds to let the system catch up Using ldapmodify to modify producer directory... Using ldappasswd to change some passwords... Waiting 7 seconds for syncrepl to receive changes... Stopping consumer to test recovery... Modifying more entries on the producer... Restarting consumer... Waiting 7 seconds for syncrepl to receive changes... Try updating the consumer slapd... Trying to change some passwords on the consumer... Waiting 7 seconds for syncrepl to receive changes... Using ldapsearch to read all the entries from the producer... Using ldapsearch to read all the entries from the consumer... Filtering producer results... Filtering consumer results... Comparing retrieved entries from producer and consumer... test failed - producer and consumer databases differ >>>>> ./scripts/test054-syncreplication-parallel-load failed (exit 1) make[2]: *** [hdb-yes] Error 1 make[2]: Leaving directory `/usr/src/michael/openldap/OPENLDAP_REL_ENG_2_4/openldap/tests' make[1]: *** [test] Error 2 make[1]: Leaving directory `/usr/src/michael/openldap/OPENLDAP_REL_ENG_2_4/openldap/tests' make: *** [test] Error 2

14 years, 6 months

1
0
0 / 0

(ITS#6125) back-sql support via Windows API ODBC

by slapd＠hannebauer.name

Full_Name: Christoph Hannebauer Version: 2.4.16 OS: Windows/cygwin URL: www.hannebauer.name/openldap-sql/configure.in.patch Submission from: (NULL) (77.189.227.183) I wasn't able to build slapd with back-sql in cygwin, because libodbc32 is not detected by configure. The console prints the error configure: error: could not locate suitable ODBC library and config.log contains: configure:31357: mgcc -o conftest.exe -g -O2 -I/usr/local/mingw/include -L/usr/local/mingw/lib conftest.c -lodbc32 >&5 /cygdrive/c/Users/CHANNE~1/AppData/Local/Temp/ccy74wDp.o: In function `main': /cygdrive/d/TestProgs/openldap-2.4.16/conftest.c:81: undefined reference to `_SQLDriverConnect' This means there is a library libodbc32, but it doesn't define SQLDriverConnect as a _cdecl function. When the current configure script searches for an ODBC library, it only checks whether one of the libraries iodbc, odbc, or odbc32 has SQLDriverConnect defined as _cdecl, which is not the case if odbc32 provides its functions as _stdcall. All Windows API functions are mangled as _stdcall functions, so I assume this error occurs on most MSYS and cygwin systems. With the attached patch, configure uses windows.h and sqlext.h to compile SQLDriverConnect and then tries to link it with -lodbc32 if no other ODBC library can be linked. This way, SQLDriverConnect is compiled the way sqlext.h defines it, which is _stdcall in case of cygwin. I have tested the patch in my environment: slapd with back-sql builds successfully. Glueck & Kanja Consulting AG (www.glueckkanja.com) hereby places the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

14 years, 6 months

1
0
0 / 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs May 2009