openldap-devel January 2026

openldap-devel@openldap.org

3 participants
2 discussions

Error# '-4 Decoding error' with ldap_search_ext_s API
by venugopal chinnakotla 08 Jan '26

08 Jan '26

Hi Team, We are working on migration of nsldap C sdk to OpenLDAP C sdk for our application client code. We are using OpenLDAP 2.6.7. As part of this migration, we are facing one issue related to Decoding Error while making ldap_search_ext_s API under load. OpenLDAP C SDK API ldap_search_ext_s is giving -4 : Decoding error when we are making a search call to LDAP server (with SSL and without SSL) under load with multi threading. Here are few log messages related to -4: decoding error [10052/17636][ERROR]Error# '-4' during search: 'error: Decoding error' Search Query = '(cn=user1)' for server 'ldapserver1:10001' [10052/15624][ERROR]Error# '-4' during search: 'error: Decoding error' Search Query = '(cn=user2)' for server 'ldapserver1:10001' When we run the same load with NSLDAP, we are not getting any Decoding errors. Whenever we switch to OpenLDAP APIs and run the load, we are getting Decoding errors for few transactions under the load. Could you please look into this and provide any solution available for this issue? Thank you. -- Thanks, *c.venugopal*

1 0

searching dynamic values
by Emmanuel Dreyfus 07 Jan '26

07 Jan '26

Hello I am working on a overlay (the same as last time with the internal search question) that produce dynamic values depending on multiple attributes. The model was slapo-dynlist. I added an on_response method and I was able to produce everything needed when handling a search request. That works like a charm. But now I would like to use the generated values in a filter when searching. In some cases, I can modify the filter on the fly in bi_op_search so that it works, but that is not always possible. I thought of two alterantives: 1) In supann_op_add and supann_op_modify, perform an internal modify operation, so that the generated values are actualy added to the entry. But There is a problem: I exit that two methods without knowing if the add or modify operation succeded or not. The dynamic values should not be added if the add/modify operation failed. 2) I could steal some ideas from slapo-dds to update entries in the whole directory on a regular basis. That seems to do a lot of useless activity, and changes will always lag a bit. For now it seems to be the best option. Is there another was of doing it? -- Emmanuel Dreyfus manu(a)netbsd.org

3 7

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-devel January 2026