rochette_jean-louis@emc.com wrote:

Full_Name: Jean-Louis ROCHETTE Version: 2.3.39 OS: Linux Fedora URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (152.62.109.163)

Brief description of the problem

Lookup of a netgroup by triple doesn't work in last stable release slapd 2.3.39, though it worked well with slapd 2.3.27. This looks like a regression in slapd. This should be easy to reproduce. The problem was first noticed in slapd 2.3.30. The lookup by triple succeeds with a iPlanet server.

There are no matching rules defined for nisNetgroupTriple in nis.schema. There have never been, since RFC2307 doesn't define any. As such, filtering by nisNetgroupTriple is totally undefined. Any server that returns your expected result using the search filter you provide is broken.

There is no regression here. Your distro vendor may have hacked their own schema files to provide one, that's an issue for you to discuss with your vendor. This ITS will be closed.