Hi !

I think I have found a a bug in openLDAP 2.4.6 (maybe I am misunderstanding RFC4511 ...). I explain the test case where (maybe) I found it:

I have created an alias (alias_entry) which points to another created entry (pointed_entry). I have not created any subordinate entry under "alias_entry" nor under "pointed_entry.

Using always the "alias_entry" as the "searchRequest.baseObject" I have been checking the answers obtained from an slapd/back-bdb as I change the values of "searchRequest.scope" and "searchRequest.derefAliases" fields (I am checking -and assuring- with "wireShark" that the LDAP searchRequest messages being sent to the slapd process are the desired ones).

I found the expected behaviour (according to RFC4511) in all cases except for the following one:

- searchRequest.scope: wholeSubtree - searchRequest.derefAliases: derefInSearching

I received two LDAP searchResEntry messages (instead of the single one expected) !!!

(1) One for the "alias_entry" (where I can see the "aliasedObjectName" attribute set to the pointed_entry's dn) ==> OK (2) One for the "pointed_entry" ==> ???????

As far as I understand RFC4511 the second entry should NOT be returned from the LDAP server !!!!

BR / Antonio

Antonio Alonso Alarcón

CUDB System Engineer

Ericsson España, S.A. Phone: +34 91339 3085

Via de los Poblados 13 Mobile: +34 609640579 (66215) 28033 Madrid, Spain Fax: +34 91339 1636 E-mail: Antonio.Alonso@ericsson.com