On Thu, Apr 02, 2026 at 06:39:48AM +0000, Sebastian Perkins wrote:
Hello Ondřej
If you only load the modules you use (removing the rwm, meta, … modules below) does it still happen?
We literally stripped down the config to be bare minimum, and still happened.
We even just added a base DN entry and also failed…
The current solution is to grep -v the 2 entries in ldif for ldapsearch (slapcat to slapadd is fine)
FYI the ldapsearch dump is used for a very specific part of the tree containing users, allowing quick restore of users (crash, envrionment sync etc), the slapcat is more brutal 😃
Would the « Issue » be in the ldapsearch result ? As slapcat is fine… however an ldapsearch bug issue on deb11 and 13 in openldap 2.4 and 2.6 is probably not one.
Hello Sebastian, I don't think the issue is in ldapsearch (but that's easy to test, just look at data in wireshark or `ldapsearch -d-1` or same in slapd logs to see what was sent).
If it really happens all the time with the config you last provided, even after making the changes that I suggested (not loading the extra modules), then please prepare a small self-contained set up that we can use to reproduce the issue. Given that I've been unable to do so based on what's been provided so far, there must be a detail that's missing that makes all the difference and honestly I'm not sure where else to look.
Regards,