ACL problem - openldap-software

3 Mar 2007


      Hi
I am using openLDAP with eGroupware and am currently trying to implement 
  eGroupware's acl_addressbook.conf, which I have adapted to the way my 
directory is built:
# Access to users personal addressbooks
# allow read of addressbook by owner and egwadmin account
access to dn.regex="^cn=([^,]+),ou=personal,ou=contacts,dc=graylion,dc=net$"
         attrs=entry
         by dn.regex="uid=$1,ou=accounts,dc=graylion,dc=net" read
         by dn.regex="cn=egwadmin,dc=graylion,dc=net" write
         by users none
# allow user to create entries in own addressbook; no-one else can access it
# needs write access to the entries ENTRY attribute ...
access to dn.regex="cn=([^,]+),ou=personal,ou=contacts,,dc=graylion,dc=net$"
         attrs=children
         by dn.regex="uid=$1,ou=accounts,dc=graylion,dc=net" write
         by users none
# ... and the entries CHILDREN
access to dn.regex="cn=([^,]+),ou=personal,ou=contacts,dc=graylion,dc=net$"
         attrs=entry,@inetOrgPerson,@mozillaAbPersonAlpha
         by dn.regex="uid=$1,ou=accounts,dc=graylion,dc=net" write
         by users none
# Access to groups addressbooks
# allow read of addressbook by members and egwadmin account
access to dn.regex="^cn=([^,]+),ou=shared,ou=contacts,dc=graylion,dc=net$"
         attrs=entry
         by group.expand="cn=$1,ou=groups,dc=graylion,dc=net" read
         by dn.regex="cn=egwadmin,o=$2,dc=graylion,dc=net" write
         by users none
# allow members to create entries in there group addressbooks; no-one 
else can access it
# needs write access to the entries ENTRY attribute ...
access to dn.regex="cn=([^,]+),ou=shared,ou=contacts,dc=graylion,dc=net$"
         attrs=children
         by group.expand="cn=$1,ou=groups,dc=graylion,dc=net" write
         by users none
# ... and the entries CHILDREN
access to dn.regex="cn=([^,]+),ou=shared,ou=contacts,dc=graylion,dc=net$"
         attrs=entry,@inetOrgPerson,@mozillaAbPersonAlpha
         by group.expand="cn=$1,ou=groups,dc=graylion,dc=net" write
         by users none
when I try to add a user I get a 503 failure and the log reads somewhat 
like this:
Mar  3 16:29:28 diskslave slapd[12582]: daemon: removing 15
Mar  3 16:29:28 diskslave slapd[12582]: conn=8 fd=15 closed
Mar  3 16:29:28 diskslave slapd[12582]: do_bind
Mar  3 16:29:28 diskslave slapd[12582]: >>> dnPrettyNormal: 
<cn=admin,dc=graylion,dc=net>
Mar  3 16:29:28 diskslave slapd[12582]: <<< dnPrettyNormal: 
<cn=admin,dc=graylion,dc=net>, <cn=admin,dc=graylion,dc=net>
Mar  3 16:29:28 diskslave slapd[12582]: do_bind: version=3 
dn="cn=admin,dc=graylion,dc=net" method=128
Mar  3 16:29:28 diskslave slapd[12582]: conn=9 op=0 BIND 
dn="cn=admin,dc=graylion,dc=net" method=128
Mar  3 16:29:28 diskslave slapd[12582]: 
bdb_dn2entry("cn=admin,dc=graylion,dc=net")
Mar  3 16:29:28 diskslave slapd[12582]: => access_allowed: auth access 
to "cn=admin,dc=graylion,dc=net" "userPassword" requested
Mar  3 16:29:28 diskslave slapd[12582]: => acl_get: [1] attr userPassword
Mar  3 16:29:28 diskslave slapd[12582]: => acl_mask: access to entry 
"cn=admin,dc=graylion,dc=net", attr "userPassword" requested
Mar  3 16:29:28 diskslave slapd[12582]: => acl_mask: to all values by 
"", (=n)
Mar  3 16:29:28 diskslave slapd[12582]: <= check a_dn_pat: 
cn=admin,dc=graylion,dc=net
Mar  3 16:29:28 diskslave slapd[12582]: <= check a_dn_pat: anonymous
Mar  3 16:29:28 diskslave slapd[12582]: <= acl_mask: [2] applying 
auth(=x) (stop)
Mar  3 16:29:28 diskslave slapd[12582]: <= acl_mask: [2] mask: auth(=x)
Mar  3 16:29:28 diskslave slapd[12582]: => access_allowed: auth access 
granted by auth(=x)
Mar  3 16:29:28 diskslave slapd[12582]: conn=9 op=0 BIND 
dn="cn=admin,dc=graylion,dc=net" mech=SIMPLE ssf=0
Mar  3 16:29:28 diskslave slapd[12582]: do_bind: v3 bind: 
"cn=admin,dc=graylion,dc=net" to "cn=admin,dc=graylion,dc=net"
Mar  3 16:29:28 diskslave slapd[12582]: send_ldap_result: conn=9 op=0 p=3
Mar  3 16:29:28 diskslave slapd[12582]: send_ldap_response: msgid=1 
tag=97 err=0
Mar  3 16:29:28 diskslave slapd[12582]: conn=9 op=0 RESULT tag=97 err=0 
text=
Mar  3 16:29:28 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:28 diskslave slapd[12582]: daemon: activity on:
Mar  3 16:29:28 diskslave slapd[12582]:  14r
Mar  3 16:29:28 diskslave slapd[12582]:
Mar  3 16:29:28 diskslave slapd[12582]: daemon: read activity on 14
Mar  3 16:29:28 diskslave slapd[12582]: connection_get(14): got connid=7
Mar  3 16:29:28 diskslave slapd[12582]: connection_read(14): checking 
for input on id=7
Mar  3 16:29:28 diskslave slapd[12582]: ber_get_next on fd 14 failed 
errno=11 (Resource temporarily unavailable)
Mar  3 16:29:28 diskslave slapd[12582]: daemon: select: listen=6 
active_threads=0 tvp=NULL
Mar  3 16:29:28 diskslave slapd[12582]: daemon: select: listen=7 
active_threads=0 tvp=NULL
Mar  3 16:29:28 diskslave slapd[12582]: do_unbind
Mar  3 16:29:28 diskslave slapd[12582]: conn=7 op=1 UNBIND
Mar  3 16:29:28 diskslave slapd[12582]: connection_closing: readying 
conn=7 sd=14 for close
Mar  3 16:29:28 diskslave slapd[12582]: connection_resched: attempting 
closing conn=7 sd=14
Mar  3 16:29:28 diskslave slapd[12582]: connection_close: conn=7 sd=14
Mar  3 16:29:28 diskslave slapd[12582]: daemon: removing 14
Mar  3 16:29:28 diskslave slapd[12582]: conn=7 fd=14 closed
Mar  3 16:29:28 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:28 diskslave slapd[12582]: daemon: select: listen=6 
active_threads=0 tvp=NULL
Mar  3 16:29:28 diskslave slapd[12582]: daemon: select: listen=7 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:29 diskslave slapd[12582]: daemon: new connection on 12
Mar  3 16:29:29 diskslave slapd[12582]: conn=10 fd=12 ACCEPT from 
IP=127.0.0.1:59758 (IP=0.0.0.0:389)
Mar  3 16:29:29 diskslave slapd[12582]: daemon: added 12r
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on:
Mar  3 16:29:29 diskslave slapd[12582]:
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=6 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=7 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on:
Mar  3 16:29:29 diskslave slapd[12582]:  12r
Mar  3 16:29:29 diskslave slapd[12582]:
Mar  3 16:29:29 diskslave slapd[12582]: daemon: read activity on 12
Mar  3 16:29:29 diskslave slapd[12582]: connection_get(12): got connid=10
Mar  3 16:29:29 diskslave slapd[12582]: connection_read(12): checking 
for input on id=10
Mar  3 16:29:29 diskslave slapd[12582]: ber_get_next on fd 12 failed 
errno=11 (Resource temporarily unavailable)
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=6 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=7 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: do_bind
Mar  3 16:29:29 diskslave slapd[12582]: >>> dnPrettyNormal: 
<uid=graylion,ou=users,dc=graylion,dc=net>
Mar  3 16:29:29 diskslave slapd[12582]: <<< dnPrettyNormal: 
<uid=graylion,ou=users,dc=graylion,dc=net>, 
<uid=graylion,ou=users,dc=graylion,dc=net>
Mar  3 16:29:29 diskslave slapd[12582]: do_bind: version=3 
dn="uid=graylion,ou=users,dc=graylion,dc=net" method=128
Mar  3 16:29:29 diskslave slapd[12582]: conn=10 op=0 BIND 
dn="uid=graylion,ou=users,dc=graylion,dc=net" method=128
Mar  3 16:29:29 diskslave slapd[12582]: 
bdb_dn2entry("uid=graylion,ou=users,dc=graylion,dc=net")
Mar  3 16:29:29 diskslave slapd[12582]: => access_allowed: auth access 
to "uid=graylion,ou=users,dc=graylion,dc=net" "userPassword" requested
Mar  3 16:29:29 diskslave slapd[12582]: => acl_get: [1] attr userPassword
Mar  3 16:29:29 diskslave slapd[12582]: => acl_mask: access to entry 
"uid=graylion,ou=users,dc=graylion,dc=net", attr "userPassword" requested
Mar  3 16:29:29 diskslave slapd[12582]: => acl_mask: to all values by 
"", (=n)
Mar  3 16:29:29 diskslave slapd[12582]: <= check a_dn_pat: 
cn=admin,dc=graylion,dc=net
Mar  3 16:29:29 diskslave slapd[12582]: <= check a_dn_pat: anonymous
Mar  3 16:29:29 diskslave slapd[12582]: <= acl_mask: [2] applying 
auth(=x) (stop)
Mar  3 16:29:29 diskslave slapd[12582]: <= acl_mask: [2] mask: auth(=x)
Mar  3 16:29:29 diskslave slapd[12582]: => access_allowed: auth access 
granted by auth(=x)
Mar  3 16:29:29 diskslave slapd[12582]: conn=10 op=0 BIND 
dn="uid=graylion,ou=users,dc=graylion,dc=net" mech=SIMPLE ssf=0
Mar  3 16:29:29 diskslave slapd[12582]: do_bind: v3 bind: 
"uid=graylion,ou=users,dc=graylion,dc=net" to 
"uid=graylion,ou=users,dc=graylion,dc=net"
Mar  3 16:29:29 diskslave slapd[12582]: send_ldap_result: conn=10 op=0 p=3
Mar  3 16:29:29 diskslave slapd[12582]: send_ldap_response: msgid=1 
tag=97 err=0
Mar  3 16:29:29 diskslave slapd[12582]: conn=10 op=0 RESULT tag=97 err=0 
text=
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:29 diskslave slapd[12582]: daemon: new connection on 13
Mar  3 16:29:29 diskslave slapd[12582]: conn=11 fd=13 ACCEPT from 
IP=127.0.0.1:59759 (IP=0.0.0.0:389)
Mar  3 16:29:29 diskslave slapd[12582]: daemon: added 13r
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on:
Mar  3 16:29:29 diskslave slapd[12582]:
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=6 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=7 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on:
Mar  3 16:29:29 diskslave slapd[12582]:  13r
Mar  3 16:29:29 diskslave slapd[12582]:
Mar  3 16:29:29 diskslave slapd[12582]: daemon: read activity on 13
Mar  3 16:29:29 diskslave slapd[12582]: connection_get(13): got connid=11
Mar  3 16:29:29 diskslave slapd[12582]: connection_read(13): checking 
for input on id=11
Mar  3 16:29:29 diskslave slapd[12582]: ber_get_next on fd 13 failed 
errno=11 (Resource temporarily unavailable)
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=6 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=7 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: do_bind
Mar  3 16:29:29 diskslave slapd[12582]: >>> dnPrettyNormal: 
<uid=graylion,ou=users,dc=graylion,dc=net>
Mar  3 16:29:29 diskslave slapd[12582]: <<< dnPrettyNormal: 
<uid=graylion,ou=users,dc=graylion,dc=net>, 
<uid=graylion,ou=users,dc=graylion,dc=net>
Mar  3 16:29:29 diskslave slapd[12582]: do_bind: version=3 
dn="uid=graylion,ou=users,dc=graylion,dc=net" method=128
Mar  3 16:29:29 diskslave slapd[12582]: conn=11 op=0 BIND 
dn="uid=graylion,ou=users,dc=graylion,dc=net" method=128
Mar  3 16:29:29 diskslave slapd[12582]: 
bdb_dn2entry("uid=graylion,ou=users,dc=graylion,dc=net")
Mar  3 16:29:29 diskslave slapd[12582]: => access_allowed: auth access 
to "uid=graylion,ou=users,dc=graylion,dc=net" "userPassword" requested
Mar  3 16:29:29 diskslave slapd[12582]: => acl_get: [1] attr userPassword
Mar  3 16:29:29 diskslave slapd[12582]: => acl_mask: access to entry 
"uid=graylion,ou=users,dc=graylion,dc=net", attr "userPassword" requested
Mar  3 16:29:29 diskslave slapd[12582]: => acl_mask: to all values by 
"", (=n)
Mar  3 16:29:29 diskslave slapd[12582]: <= check a_dn_pat: 
cn=admin,dc=graylion,dc=net
Mar  3 16:29:29 diskslave slapd[12582]: <= check a_dn_pat: anonymous
Mar  3 16:29:29 diskslave slapd[12582]: <= acl_mask: [2] applying 
auth(=x) (stop)
Mar  3 16:29:29 diskslave slapd[12582]: <= acl_mask: [2] mask: auth(=x)
Mar  3 16:29:29 diskslave slapd[12582]: => access_allowed: auth access 
granted by auth(=x)
Mar  3 16:29:29 diskslave slapd[12582]: conn=11 op=0 BIND 
dn="uid=graylion,ou=users,dc=graylion,dc=net" mech=SIMPLE ssf=0
Mar  3 16:29:29 diskslave slapd[12582]: do_bind: v3 bind: 
"uid=graylion,ou=users,dc=graylion,dc=net" to 
"uid=graylion,ou=users,dc=graylion,dc=net"
Mar  3 16:29:29 diskslave slapd[12582]: send_ldap_result: conn=11 op=0 p=3
Mar  3 16:29:29 diskslave slapd[12582]: send_ldap_response: msgid=1 
tag=97 err=0
Mar  3 16:29:29 diskslave slapd[12582]: conn=11 op=0 RESULT tag=97 err=0 
text=
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on:
Mar  3 16:29:29 diskslave slapd[12582]:  13r
Mar  3 16:29:29 diskslave slapd[12582]:
Mar  3 16:29:29 diskslave slapd[12582]: daemon: read activity on 13
Mar  3 16:29:29 diskslave slapd[12582]: connection_get(13): got connid=11
Mar  3 16:29:29 diskslave slapd[12582]: connection_read(13): checking 
for input on id=11
Mar  3 16:29:29 diskslave slapd[12582]: ber_get_next on fd 13 failed 
errno=11 (Resource temporarily unavailable)
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=6 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=7 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: do_search
Mar  3 16:29:29 diskslave slapd[12582]: >>> dnPrettyNormal: 
<cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net>
Mar  3 16:29:29 diskslave slapd[12582]: <<< dnPrettyNormal: 
<cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net>, 
<cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net>
Mar  3 16:29:29 diskslave slapd[12582]: conn=11 op=1 SRCH 
base="cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net" scope=1 
deref=0 filter="(&(objectClass=inetOrgPerson))"
Mar  3 16:29:29 diskslave slapd[12582]: conn=11 op=1 SRCH attr=uidnumber 
uid cn givenname sn audio description labeleduri o ou title street l st 
postalcode telephonenumber homephone facsimiletelephonenumber mobile 
pager mail roomnumber jpegphoto displayname postaladdress 
userSMIMECertificate mozillaworkstreet2 c mozillahomestreet 
mozillahomestreet2 mozillahomelocalityname mozillahomestate 
mozillahomepostalcode mozillahomecountryname mozillasecondemail 
mozillahomeurl mozillapostaladdress2 co mozillahomepostaladdress2 
birthdate note carphone primaryphone category businessrole 
assistantphone assistantname fileas homefacsimiletelephonenumber 
freeBusyuri calendaruri otherphone callbackPhone entryUUID uid uidNumber 
objectClass createTimestamp modifyTimestamp creatorsName modifiersName
Mar  3 16:29:29 diskslave slapd[12582]: ==> limits_get: conn=11 op=1 
dn="uid=graylion,ou=users,dc=graylion,dc=net"
Mar  3 16:29:29 diskslave slapd[12582]: => bdb_search
Mar  3 16:29:29 diskslave slapd[12582]: 
bdb_dn2entry("cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net")
Mar  3 16:29:29 diskslave slapd[12582]: search_candidates: 
base="cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net" 
(0x00000019) scope=1
Mar  3 16:29:29 diskslave slapd[12582]: => bdb_dn2idl( 
"cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net" )
Mar  3 16:29:29 diskslave slapd[12582]: <= bdb_dn2idl: id=1 first=28 
last=28
Mar  3 16:29:29 diskslave slapd[12582]: => bdb_equality_candidates 
(objectClass)
Mar  3 16:29:29 diskslave slapd[12582]: => key_read
Mar  3 16:29:29 diskslave slapd[12582]: <= bdb_index_read: failed (-30990)
Mar  3 16:29:29 diskslave slapd[12582]: <= bdb_equality_candidates: 
id=0, first=0, last=0
Mar  3 16:29:29 diskslave slapd[12582]: => bdb_equality_candidates 
(objectClass)
Mar  3 16:29:29 diskslave slapd[12582]: => key_read
Mar  3 16:29:29 diskslave slapd[12582]: <= bdb_index_read 7 candidates
Mar  3 16:29:29 diskslave slapd[12582]: <= bdb_equality_candidates: 
id=7, first=9, last=28
Mar  3 16:29:29 diskslave slapd[12582]: bdb_search_candidates: id=1 
first=28 last=28
Mar  3 16:29:29 diskslave slapd[12582]: entry_decode: 
"uid=325b9c76485ab753ed53ed9f496793c6,cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net"
Mar  3 16:29:29 diskslave slapd[12582]: <= 
entry_decode(uid=325b9c76485ab753ed53ed9f496793c6,cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net)
Mar  3 16:29:29 diskslave slapd[12582]: => bdb_dn2id( 
"uid=325b9c76485ab753ed53ed9f496793c6,cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net" 
)
Mar  3 16:29:29 diskslave slapd[12582]: <= bdb_dn2id: got id=0x0000001c
Mar  3 16:29:29 diskslave slapd[12582]: => access_allowed: search access 
to 
"uid=325b9c76485ab753ed53ed9f496793c6,cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net" 
"objectClass" requested
Mar  3 16:29:29 diskslave slapd[12582]: => dn: [2]
Mar  3 16:29:29 diskslave slapd[12582]: => acl_get: [3] attr objectClass
Mar  3 16:29:29 diskslave slapd[12582]: => acl_mask: access to entry 
"uid=325b9c76485ab753ed53ed9f496793c6,cn=graylion,ou=personal,ou=contacts,dc=graylion,dc=net", 
attr "objectClass" requested
Mar  3 16:29:29 diskslave slapd[12582]: => acl_mask: to value by 
"uid=graylion,ou=users,dc=graylion,dc=net", (=n)
Mar  3 16:29:29 diskslave slapd[12582]: <= check a_dn_pat: 
cn=admin,dc=graylion,dc=net
Mar  3 16:29:29 diskslave slapd[12582]: <= acl_mask: no more <who> 
clauses, returning =n (stop)
Mar  3 16:29:29 diskslave slapd[12582]: => access_allowed: search access 
denied by =n
Mar  3 16:29:29 diskslave slapd[12582]: bdb_search: 28 does not match 
filter
Mar  3 16:29:29 diskslave slapd[12582]: send_ldap_result: conn=11 op=1 p=3
Mar  3 16:29:29 diskslave slapd[12582]: send_ldap_response: msgid=2 
tag=101 err=0
Mar  3 16:29:29 diskslave slapd[12582]: conn=11 op=1 SEARCH RESULT 
tag=101 err=0 nentries=0 text=
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on:
Mar  3 16:29:29 diskslave slapd[12582]:  13r
Mar  3 16:29:29 diskslave slapd[12582]:
Mar  3 16:29:29 diskslave slapd[12582]: daemon: read activity on 13
Mar  3 16:29:29 diskslave slapd[12582]: connection_get(13): got connid=11
Mar  3 16:29:29 diskslave slapd[12582]: connection_read(13): checking 
for input on id=11
Mar  3 16:29:29 diskslave slapd[12582]: ber_get_next on fd 13 failed 
errno=11 (Resource temporarily unavailable)
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=6 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=7 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: do_unbind
Mar  3 16:29:29 diskslave slapd[12582]: conn=11 op=2 UNBIND
Mar  3 16:29:29 diskslave slapd[12582]: connection_closing: readying 
conn=11 sd=13 for close
Mar  3 16:29:29 diskslave slapd[12582]: connection_resched: attempting 
closing conn=11 sd=13
Mar  3 16:29:29 diskslave slapd[12582]: connection_close: conn=11 sd=13
Mar  3 16:29:29 diskslave slapd[12582]: daemon: removing 13
Mar  3 16:29:29 diskslave slapd[12582]: conn=11 fd=13 closed
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=6 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: select: listen=7 
active_threads=0 tvp=NULL
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on 1 descriptors
Mar  3 16:29:29 diskslave slapd[12582]: daemon: activity on:
Mar  3 16:29:29 diskslave slapd[12582]:  10r
Mar  3 16:29:29 diskslave slapd[12582]:
Mar  3 16:29:29 diskslave slapd[12582]: daemon: read activity on 10
Mar  3 16:29:29 diskslave slapd[12582]: connection_get(10): got connid=9
Mar  3 16:29:29 diskslave slapd[12582]: connection_read(10): checking 
for input on id=9
Mar  3 16:29:29 diskslave slapd[12582]: ber_get_next on fd 10 failed 
errno=11 (Resource temporarily unavailable)
so this looks like the cinch to me:
Mar  3 16:29:29 diskslave slapd[12582]: bdb_search: 28 does not match 
filter
any idea what is wrong?
thanks
Bernhard
-- 
Graylion's Fetish & Fashion Store
Goth and Kinky Boots, Clothing and Jewellery
http://www.graylion.net