eduard.budulea@axigen.com wrote:

Full_Name: Eduard Budulea Version: 2.4.11 OS: gnu/linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (193.230.245.6)

ldap_search_ext_s does not return all the messages that the server sends. If the response from the ldap server is compose from 2 messages:

• a LDAP Intermediate Response Message
• a SearchResultDone Message

the ldap_search_ext_s returns only the intermediate one.

Step to reporduce: have a ldap running with some entries. have a the syncprov overlay deploy. make a synchronous search with a null cookie and a filter that does not match all the entries. now modify an entry that is not in the previous result set. make another synchronous search with the cookie from the previous search. you will be able to see only the intermediate and not the done (that holds the cookie).

If you do the same but using ldap_search_ext and ldap_result you will get the result done message also.

This behavior is by design, and has been in place since 2000. Whether the design is correct or not may be an open question; since Kurt wrote that code I'd ask him to comment further.