Hi !

   I think I have found a a bug in openLDAP 2.4.6 (maybe I am misunderstanding RFC4511 …). I explain
the test case where (maybe) I found it:

   I have created an alias (alias_entry) which points to another created entry (pointed_entry). I have
not created any subordinate entry under "alias_entry" nor under "pointed_entry.

   Using always the "alias_entry" as the "searchRequest.baseObject" I have been checking the answers
obtained from an slapd/back-bdb as I change the values of "searchRequest.scope" and "searchRequest.derefAliases"
fields (I am checking -and assuring- with "wireShark" that the LDAP searchRequest messages being sent to the slapd
process are the desired ones).

   I found the expected behaviour (according to RFC4511) in all cases except for the following one:

- searchRequest.scope: wholeSubtree
- searchRequest.derefAliases: derefInSearching

   I received two LDAP searchResEntry messages (instead of the single one expected) !!!

(1) One for the "alias_entry" (where I can see the "aliasedObjectName" attribute set to the pointed_entry's dn) ==> OK
(2) One for the "pointed_entry" ==> ???????

  As far as I understand RFC4511 the second entry should NOT be returned from the LDAP server !!!!

BR / Antonio

Antonio Alonso Alarcón
CUDB System Engineer

Ericsson España, S.A.           Phone: +34 91339 3085
Via de los Poblados 13          Mobile: +34 609640579 (66215)
28033 Madrid, Spain                           Fax: +34 91339 1636
E-mail: Antonio.Alonso@ericsson.com