--On Thursday, September 09, 2010 6:45 PM +0000 masarati@aero.polimi.it wrote:

...

Committed to HEAD; please test. Thanks, p.

Doesn't appear to work to me.

This search returns 15 entries normally:

ldapsearch -x -H ldapi:/// -D cn=config -w zimbra -b "" '(objectClass=zimbraAccount)' zimbraId

# numResponses: 16 # numEntries: 15

If you choose the control you get:

zimbra@zre-ldap003:~$ ldapsearch -x -H ldapi:/// -D cn=config -w zimbra -b "" -e '1.3.6.1.4.1.4203.666.5.18' '(objectClass=zimbraAccount)' zimbraId # extended LDIF # # LDAPv3 # base <> with scope subtree # filter: (objectClass=zimbraAccount) # requesting: zimbraId #

# search result search: 2 result: 0 Success control: 1.3.6.1.4.1.4203.666.5.18 false MAkCAQACAQ8CAQA=

I think it works as expected:

$ echo -n 'MAkCAQACAQ8CAQA=' | base64 -d | od -x 0000000 0930 0102 0200 0f01 0102 0000

re-ordered:

0x30 ber sequence 0x09 length (9 bytes)

0x02 ber int 0x01 length (1 byte) 0x00 "0" (value of would be search result code)

0x02 ber int 0x01 length (1 byte) 0x0f "15" (number of would be returned entries)

0x02 ber int 0x01 length (1 byte) 0x00 "0" (number of would be returned search refs)

p.

# numResponses: 1

MAkCAQACAQ8CAQA= decodes to a 0 followed by several spaces. If you try to make it critical, it fails:

zimbra@zre-ldap003:~$ ldapsearch -x -H ldapi:/// -D cn=config -w zimbra -b "" -e '!1.3.6.1.4.1.4203.666.5.18' '(objectClass=zimbraAccount)' zimbraId # extended LDIF # # LDAPv3 # base <> with scope subtree # filter: (objectClass=zimbraAccount) # requesting: zimbraId #

# search result search: 2 result: 12 Critical extension is unavailable text: critical control unavailable in context

# numResponses: 1

--Quanah

--

Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc.

---

Zimbra :: the leader in open source messaging and collaboration