hyc@symas.com wrote:

ando@sys-net.it wrote:

...

mhardin@symas.com wrote:

...

Howard Chu's examination of the core file showed that the remote AD server returned a member attribute with no values. This is only legal in LDAP when a client sets the attrsonly flag in its search request, and that flag was not set here.

[..] AD is flaky enough already, but it's possible that back-meta may have dropped the attr values during rewriting, etc.

FWIW: I never saw an empty attribute value list returned by AD. I've added code to web2ldap to handle that case since I had this issue with various other LDAP servers but not AD.

Ciao, Michael.