Hi, I'm testing OpenLDAP-2.4.4alpha, this is my ~/.ldaprc, please note the URI statement:
,----[ .ldaprc ] | TLS_REQCERT try | TLS_CACERT /home/dieter/certs/kluenterCA.pem | BASE o=avci,c=de | URI ldapi://%2Fusr%2Flocal%2Fvar%2Frun%2Fldapi `---- and this is part of cn=config
,----[ cn=config ] | olcAuthzRegexp: {1}"gidNumber=(.*)+uidNumber=(.*),cn=peercred,cn=external,cn= | auth" "ldap:///o=avci,c=de??sub?(&(uidNumber=$2)(gidNumber=$1))" `----
When doing ldapwhoami I get
,----[ ldapwhoami ] | :~> ldapwhoami -Yexternal | SASL/EXTERNAL authentication started | SASL username: gidNumber=100+uidNumber=1000,cn=peercred,cn=external,cn=auth | SASL SSF: 0 | dn:gidNumber=100+uidNumber=1000,cn=peercred,cn=external,cn=auth `----
while ldapsearch supplies the correct answer: ,----[ ldapsearch ] | :~> ldapsearch -LLL -Ydigest-md5 "(&(uidNumber=1000)(gidNumber=100))" dn | SASL/DIGEST-MD5 authentication started | Please enter your password: | SASL username: dieter | SASL SSF: 128 | SASL data security layer installed. | dn: cn=Dieter Kluenter,ou=Partner,o=avci,c=de `----
the slapd auth-regexp has not been changed for ages and worked perfectly until now, what has changed that makes my auth-regexp not working anymore?
-Dieter
openldap-software@openldap.org