https://bugs.openldap.org/show_bug.cgi?id=10427
Issue ID: 10427 Summary: ldapsearch(1) incorrectly documents OID-based search option Product: OpenLDAP Version: 2.6.10 Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: client tools Assignee: bugs@openldap.org Reporter: michael.osipov@innomotics.com Target Milestone: ---
Created attachment 1109 --> https://bugs.openldap.org/attachment.cgi?id=1109&action=edit Git-formatted patch
Docs/manpage for -E say: [!]<oid>[=:<value>|::<b64value>]
But it does not work:
$ ldapsearch -Y GSSAPI -O maxssf=1 -E '!1.2.840.113556.1.4.1340::MAYSBAAAAAI=' -o ldif-wrap=no -H ldap://innomotics.net "(objectClass=dnsNode1)"
Invalid search extension name: 1.2.840.113556.1.4.1340::MAYSBAAAAAI
It is '=::':
$ ldapsearch -Y GSSAPI -O maxssf=1 -E '!1.2.840.113556.1.4.1340=::MAYSBAAAAAI=' -o ldif-wrap=no -H ldap://innomotics.net "(objectClass=dnsNode1)" SASL/GSSAPI authentication started
Attached is a simple patch to fix it.