Full_Name: Marco Innocenti Version: 2.4.36 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (130.186.19.81)
Hi, I do administer a system which hosts a slapd instance (2.4.36) which is used by one of our customer which use a tree with tens of thousand of aliases. The backend is HDB.
If I do a search with alias dereferencing set to always using "ou=1004,ou=studenti,o=uni,dc=uni,dc=it" as a base I do find the record I'm looking for.
vm:~# time ldapsearch -x -H ldap://localhost:8501 -D 'cn=manager,dc=uni,dc=it' -W -b ou=1004,ou=studenti,o=uni,dc=uni,dc=it uid=mario.rossi -a always | grep # Enter LDAP Password: # extended LDIF # # LDAPv3 # base <ou=1004,ou=studenti,o=uni,dc=uni,dc=it> with scope subtree # filter: uid=mario.rossi # requesting: ALL # # mario.rossi, m, utenti, uni, uni.it # search result # numResponses: 2 # numEntries: 1
real 0m1.607s user 0m0.000s sys 0m0.000s
If I do the same search on the parent of the previously used base ("ou=studenti,o=uni,dc=uni,dc=it" vs "ou=1004,ou=studenti,o=uni,dc=uni,dc=it") I do not get any record and no errors are logged.
vm:~# time ldapsearch -x -H ldap://localhost:8501 -D cn=manager,dc=uni,dc=it -W -b ou=studenti,o=uni,dc=uni,dc=it uid=mario.rossi -a always Enter LDAP Password: # extended LDIF # # LDAPv3 # base <ou=studenti,o=uni,dc=uni,dc=it> with scope subtree # filter: uid=mario.rossi # requesting: ALL #
# search result search: 2 result: 0 Success
# numResponses: 1
real 0m5.301s user 0m0.004s sys 0m0.000s