On Wed, Jun 25, 2008 at 08:10:56PM +0000, Andrew Findlay wrote:

When 'sortvals members' is in effect, some attribute modify operations produce bad results. This seems to occur when an operation adds an attribute that sorts to the end of the list.

Having thought about this some more I now think that the problem is to do with read/search rather than add. The last value in the list cannot be matched however it got there.

The test data I uploaded with the ITS contains this group entry:

dn: cn=tenK,ou=groups,o=test,dc=example,dc=org objectclass: groupOfNames cn: tenK member: uniqueIdentifier=a_000000,dc=example,dc=org member: uniqueIdentifier=a_000001,dc=example,dc=org member: uniqueIdentifier=a_004994,dc=example,dc=org member: uniqueIdentifier=a_004995,dc=example,dc=org member: uniqueIdentifier=a_004996,dc=example,dc=org member: uniqueIdentifier=a_004997,dc=example,dc=org member: uniqueIdentifier=a_004998,dc=example,dc=org member: uniqueIdentifier=a_004999,dc=example,dc=org member: uniqueIdentifier=a_005000,dc=example,dc=org

If I do a search for any value except the last one, it succeeds:

./bound-search member=uniqueIdentifier=a_004999,dc=example,dc=org # tenK, groups, test, example.org dn: cn=tenK,ou=groups,o=test,dc=example,dc=org objectClass: groupOfNames cn: tenK member: uniqueIdentifier=a_000000,dc=example,dc=org member: uniqueIdentifier=a_000001,dc=example,dc=org member: uniqueIdentifier=a_004994,dc=example,dc=org member: uniqueIdentifier=a_004995,dc=example,dc=org member: uniqueIdentifier=a_004996,dc=example,dc=org member: uniqueIdentifier=a_004997,dc=example,dc=org member: uniqueIdentifier=a_004998,dc=example,dc=org member: uniqueIdentifier=a_004999,dc=example,dc=org member: uniqueIdentifier=a_005000,dc=example,dc=org

# search result search: 2 result: 0 Success

./bound-search member=uniqueIdentifier=a_005000,dc=example,dc=org ... this does not find anything

This explains why the add and modify operations failed in such an odd way.

Andrew