quanah(a)zimbra.com wrote:
Full_Name: Quanah Gibson-Mount
Version: 2.4.25
OS: Linux 2.6
URL:
ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (75.111.45.108)
When a modrdn operation is done on a subtree (I.e., subtree rename), the result
is that back-hdb will return certain entries in that subtree multiple times.
Stopping and restarting slapd fixes the behavior.
This is now fixed in git master. For the record, it had nothing to do with
modrdn; it was a bug in the back-hdb subtree IDL code, and would always occur
if IDL caching was enabled, and a subtree below the search target was searched
before the search target. It could be easily duplicated in the test suite
using e.g.
ldapsearch -b "ou=alumni association,ou=people,dc=example,dc=com"
ldapsearch -b ou=people,dc=example,dc=com
which would result in "ou=alumni association" being returned twice on the 2nd
search.
Example:
ldapsearch -x -v -H 'ldap://HOST ' -w PASSWORD -D
'uid=zimbra,cn=admins,cn=zimbra' -b "dc=NEWDOMAIN,dc=COM"
ldap_initialize( ldap://HOST:389/??base )
filter: (objectclass=*)
requesting: All userApplication attributes
# extended LDIF
#
# LDAPv3
# base<dc=NEWDOMAIN,dc=COM> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# d-fashion.be
dn: dc=NEWDOMAIN,dc=COM
o:
NEWDOMAIN.com domain
zimbraDomainName:
NEWDOMAIN.COM
zimbraDomainStatus: active
zimbraPublicServiceHostname:
mail.domain.com
zimbraId: affb06b8-79bc-430a-adf7-411cc45e8f00
zimbraMailStatus: enabled
objectClass: dcObject
objectClass: organization
objectClass: zimbraDomain
zimbraDomainType: local
dc: NEWDOMAIN
zimbraPreAuthKey: PRIVATE
# people,
NEWDOMAIN.COM
dn: ou=people,dc=NEWDOMAIN,dc=COM
ou: people
objectClass: organizationalRole
cn: people
# people,
NEWDOMAIN.COM
dn: ou=people,dc=NEWDOMAIN,dc=COM
ou: people
objectClass: organizationalRole
cn: people
--
-- Howard Chu
CTO, Symas Corp.
http://www.symas.com
Director, Highland Sun
http://highlandsun.com/hyc/
Chief Architect, OpenLDAP
http://www.openldap.org/project/