Dear everyone on the list

I have seen this very strange behavior on our ldap first time in 3 years of running openldap, my strange case can be explained with these two searches, the first search (cn=Dirk Bonge*) returns an entry with RDN as "cn=Dirk Bonges" and the second search (cn=*) returns many entry but missed "cn=Dirk Bonges" (which should be included), rest of the two search command are exactly the same:

$ ldapsearch -D xxx -b uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com,dc=de "cn=Dirk Bonge*" dn cn # extended LDIF # # LDAPv3 # base <uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com,dc=de> with scope subtree # filter: cn=Dirk Bonge* # requesting: dn cn #

# Dirk Bongers, PricewaterhouseCoopers_0, contacts, china, ahk.de dn: cn=Dirk Bongers,uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com,d c=de cn;lang-py: shen zhi bo cn: Dirk Bongers

# Dirk Bonger, PricewaterhouseCoopers_0, contacts, china, ahk.de dn: cn=Dirk Bonger,uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com,dc =de cn: Dirk Bonger cn;lang-de:: IA==

# search result search: 2 result: 0 Success

# numResponses: 3 # numEntries: 2 $ ldapsearch -D xxx -b uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com,dc=de "cn=*" dn cn # extended LDIF # # LDAPv3 # base <uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com,dc=de> with scope subtree # filter: cn=* # requesting: dn cn #

# Edward Shum, PricewaterhouseCoopers_0, contacts, china, ahk.de dn: cn=Edward Shum,uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com,dc =de cn: Edward Shum cn;lang-zh:: 5rKI56ia5rOi cn;lang-py: shen zhi bo

# Dirk Bonger, PricewaterhouseCoopers_0, contacts, china, ahk.de dn: cn=Dirk Bonger,uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com,dc =de cn: Dirk Bonger cn;lang-de:: IA==

# Tao Xu, PricewaterhouseCoopers_0, contacts, china, ahk.de dn: cn=Tao Xu,uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com,dc=de cn: Tao Xu

# Anke Schrader, PricewaterhouseCoopers_0, contacts, china, ahk.de dn: cn=Anke Schrader,uid=PricewaterhouseCoopers_0,ou=contacts,ou=china,dc=com, dc=de cn: Anke Schrader

# search result search: 2 result: 0 Success

# numResponses: 5 # numEntries: 4

I don't know what further information I should provide (e.g. which section of the slapd.conf should I provide), the OS is Debian Etch and we use openldap 2.3.27. we used accesslog overlay and refint overlay, backend is hdb. Please let me know what I should provide. Thanks very much in advance!

Best Regards -- Zhang Weiwu