Andrew Bartlett wrote:
On Thu, 2008-10-23 at 00:15 +0200, Pierangelo Masarati wrote:
A tentative implementation is in HEAD, please test. You need to:
Thankyou very much. I downloaded CVS HEAD and tested it out (finally - the Samba4 side of the implementation took far longer than I expected).
configure as --enable-deref
enable the "deref" overlay in slapd, with "overlay deref" (doesn't
work as global overlay yet, sorry).
This is something Samba4 will need, as many of our links are cross-database. But fixing this for a single DB is a big help in any case.
- run searches like
$ ldapsearch -x -b dc=example,dc=com -E 'deref=member:entryUUID'
you'll see results like
When using Samba4's client, it seems to work, but it is as if it extends the control to the full expected length, but not the data. Ie, attached this is the control response I got back from the 'make testenv' environment in Samba4. I've also attached the full LDAP request.
The extra zeros also appear in the OpenLDAP logs (so it's not a Samba4 parsing bug).
I've found the bug (erroneous manipulation of octet strings containing '\0' octets). The objectSid is octet string-valued. Should be fixed now; please test.
p.
Ing. Pierangelo Masarati OpenLDAP Core Team
SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando@sys-net.it -----------------------------------