Re: Bind failing with "critical extension is unavailable" error when used with pagedresultscontrol

5 Jan 2013

      ...
I have a program that works with Microsoft LDAP that I'm trying to get to
work with openldap.  The program is from a third-party and I have NO
access to the code.  I was able to duplicate the behavior with Perl code
(testPaged.pl) later in this email.
The bind is to a domain that uses the BDB backend.  If my test code
ignores the error from bind, it does the paged results just fine.  The
problem is the third-party program stops if it sees the error in bind.
I've captured network traffic to the Microsoft LDAP server and see that it
generates NO error.
The version I'm running is:  [root@radius1 openldap]# slapd -V
@(#) $OpenLDAP: slapd 2.4.23 (Jul 31 2012 10:47:00) $
        mockbuild@x86-001.build.bos.redhat.com:/builddir/build/BUILD/openldap-2.4.23/openldap-2.4.23/build-servers/servers/slapd
Is this a bug?
Yes, in the PERL code.  Read RFC 2696:
2. The Control
This control is included in the searchRequest and searchResultDone
   messages as part of the controls field of the LDAPMessage [...]
The PERL code is using paged results in the bind request, which is
nonsense, and it's making it critical, so the server can only reject the
request.  Fix the client and the problem will go away.
p.
...
I have the perl code, the debug run of the perl code, the
slapd.d structure,  dumps of the olcDatabase entries, and the results of
"slapd -d -1" output.
##==============================================================testPaged.pl
[mcannady@vmHTCradius1 ldap]$ cat testPaged.pl
 use Net::LDAP;
 use Net::LDAP::Control::Paged;
 use Net::LDAP::Constant qw( LDAP_CONTROL_PAGED );
##################################
sub ProcessSearch {
    my ( $msg, $result ) = @_;
## Nothing to do
return if ( ! defined($result) );

if ( $result->isa("Net::LDAP::Reference") ) {
        ## a reference... just mention it.
} else {
        $result->dump(  );
        print "\n";
}
}
#####################################
$ldap = Net::LDAP->new( "radius1.pbx.htc.internal" );
$page = Net::LDAP::Control::Paged->new( size => 10 , critical => true );
$mesg = $ldap->bind( "uid=NuPoint,dc=htc,dc=com",
                 password => "XXXXXXX[redacted]XXXXXXXXXXX" ,
                 control => [ $page ]
            );
if ( $mesg->code ) {
   ## print error
   print "error on bind: ", $mesg->error(), "\n";
   return;
}
@args = ( base     => "cn=Users,dc=htc,dc=com",
           scope    => "subtree",
           filter   => "(objectClass=user)",
           callback => &ProcessSearch, # Call this sub for each entry
           control  => [ $page ],
 );
my $cookie;
 while(1) {
   # Perform search
   my $mesg = $ldap->search( @args );
# Only continue on LDAP_SUCCESS
   $mesg->code and last;
# Get cookie from paged control
   my($resp)  = $mesg->control( LDAP_CONTROL_PAGED ) or last;
   $cookie    = $resp->cookie or last;
# Set cookie in paged control
    $page->cookie($cookie);
 }
if ($cookie) {
    # We had an abnormal exit, so let the server know we do not want any
more
    $page->cookie($cookie);
    $page->size(0);
    $ldap->search( @args );
  }
[mcannady@vmHTCradius1 ldap]$
##================================================================  perl
debug-mode test
[mcannady@vmHTCradius1 ldap]$ perl -d testPaged.pl
Loading DB routines from perl5db.pl version 1.32
Editor support available.
Enter h or `h h' for help, or `man perldebug' for more help.
main::(testPaged.pl:20):         $ldap = Net::LDAP->new(
"radius1.pbx.htc.internal" );
  DB<1> n
main::(testPaged.pl:22):         $page = Net::LDAP::Control::Paged->new(
size => 10 , critical => true );
  DB<1> n
main::(testPaged.pl:24):         $mesg = $ldap->bind(
"uid=NuPoint,dc=htc,dc=com",
main::(testPaged.pl:25):                         password =>
"XXXXXXXXX[redacted]XXXXXX" ,
main::(testPaged.pl:26):                         control => [ $page ]
main::(testPaged.pl:27):                    );
  DB<1> n
main::(testPaged.pl:28):        if ( $mesg->code ) {
  DB<1> n
main::(testPaged.pl:30):           print "error on bind: ",
$mesg->error(), "\n";
  DB<1> n
error on bind: critical extension is unavailable
main::(testPaged.pl:31):           return;
##======================================================================================
[root@radius1 slapd.d]# find . -print
.
./cn=config.ldif
./cn=config
./cn=config/cn=include{1}.ldif
./cn=config/cn=schema
./cn=config/cn=schema/cn={1}cosine.ldif
./cn=config/cn=schema/cn={4}ad.ldif
./cn=config/cn=schema/cn={2}inetorgperson.ldif
./cn=config/cn=schema/cn={3}nis.ldif
./cn=config/cn=schema/cn={0}core.ldif
./cn=config/cn=include{3}.ldif
./cn=config/olcDatabase={1}bdb.ldif
./cn=config/olcDatabase={2}bdb.ldif
./cn=config/olcDatabase={0}config.ldif
./cn=config/cn=schema.ldif
./cn=config/cn=include{2}.ldif
./cn=config/cn=include{0}.ldif
./cn=config/olcDatabase={3}monitor.ldif
./cn=config/olcDatabase={-1}frontend.ldif
##=======================================================================================
======================================================== cat
olcDatabase={0}config.ldif
dn: olcDatabase={0}config
objectClass: olcDatabaseConfig
olcDatabase: {0}config
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=admin,cn=config
olcRootPW:: XXXredactedXXX
structuralObjectClass: olcDatabaseConfig
entryUUID: ac0d8a60-c861-1031-9bd4-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
entryCSN: 20121121195915Z#000000#00#000000
modifiersName: cn=config
modifyTimestamp: 20121121195915Z
======================================================== cat
olcDatabase={1}bdb.ldif
dn: olcDatabase={1}bdb
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: {1}bdb
olcSuffix: dc=htc,dc=com
olcAccess: {0}to *  by
dn.base="uid=push-master,cn=nupointproxy,dc=internal" w
 rite  by * +0 break
olcAccess: {1}to dn.base=""  by * read
olcAccess: {2}to dn.base="cn=subschema"  by * read
olcAccess: {3}to dn.subtree="cn=monitor"  by users read  by * none
olcAccess: {4}to *  by self write  by * read
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootPW:: XXXXXXXXXXXXXXXXXXXXredactedXXXXXXXXXXXX
olcDbDirectory: /var/lib/ldap/htc.com
olcDbCacheSize: 150000
olcDbCheckpoint: 102400 1
olcDbConfig: {0}set_cachesize 0 268435465 1
olcDbConfig: {1}set_lg_bsize 2097152
olcDbConfig: {2}set_lg_regionmax 262144
olcDbConfig: {3}set_flags DB_LOG_AUTOREMOVE
olcDbNoSync: TRUE
olcDbDirtyRead: FALSE
olcDbIDLcacheSize: 150000
olcDbIndex: objectClass pres,eq
olcDbIndex: cn pres,eq,sub
olcDbIndex: ou pres,eq,sub
olcDbIndex: mail pres,eq,sub
olcDbIndex: sn pres,eq,sub
olcDbIndex: givenName pres,eq,sub
olcDbLinearIndex: FALSE
olcDbMode: 384
olcDbSearchStack: 16
olcDbShmKey: 12321
olcDbCacheFree: 1
structuralObjectClass: olcBdbConfig
entryUUID: ac0da28e-c861-1031-9bd5-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
olcRootDN: uid=Manager,dc=htc,dc=com
olcUpdateDN: uid=Push-Master,cn=NupointProxy,dc=internal
entryCSN: 20121212180425.846656Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20121212180425Z
======================================================== cat
olcDatabase={-1}frontend.ldif
dn: olcDatabase={-1}frontend
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: {-1}frontend
olcLastMod: TRUE
olcMaxDerefDepth: 0
olcReadOnly: FALSE
olcSchemaDN: cn=Subschema
structuralObjectClass: olcDatabaseConfig
entryUUID: ac0d771e-c861-1031-9bd3-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
olcTimeLimit: unlimited
olcSizeLimit: unlimited
entryCSN: 20121214201101.233668Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20121214201101Z
======================================================== cat
olcDatabase={2}bdb.ldif
dn: olcDatabase={2}bdb
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: {2}bdb
olcSuffix: dc=internal
olcAddContentAcl: FALSE
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=admin,cn=config
olcSyncUseSubentry: FALSE
olcMonitoring: TRUE
olcDbDirectory: /var/lib/ldap/htc.internal
olcDbCacheSize: 1000
olcDbCheckpoint: 100 63
olcDbNoSync: FALSE
olcDbDirtyRead: FALSE
olcDbIDLcacheSize: 0
olcDbLinearIndex: FALSE
olcDbMode: 0600
olcDbSearchStack: 16
olcDbShmKey: 0
olcDbCacheFree: 1
olcDbDNcacheSize: 0
structuralObjectClass: olcBdbConfig
entryUUID: 92ff370e-dcc9-1031-8a59-533cee5baf07
creatorsName: cn=config
createTimestamp: 20121217191324Z
entryCSN: 20121217191324.652465Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20121217191324Z
======================================================== cat
olcDatabase={3}monitor.ldif
dn: olcDatabase={3}monitor
objectClass: olcDatabaseConfig
olcDatabase: {3}monitor
olcAddContentAcl: FALSE
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcSyncUseSubentry: FALSE
olcMonitoring: FALSE
structuralObjectClass: olcDatabaseConfig
entryUUID: 54da1e50-d8df-1031-85bf-235d062b63b6
creatorsName: cn=config
createTimestamp: 20121212193904Z
entryCSN: 20121212193904.665758Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20121212193904Z
========================================================
Script started on Tue 18 Dec 2012 01:56:28 PM EST
[root@radius1 openldap]# slapd -u ldap -d -1
@(#) $OpenLDAP: slapd 2.4.23 (Jul 31 2012 10:47:00) $
   mockbuild@x86-001.build.bos.redhat.com:/builddir/build/BUILD/openldap-2.4.23/openldap-2.4.23/build-servers/servers/slapd
ldap_pvt_gethostbyname_a: host=radius1.pbx.htc.internal, r=0
daemon_init: <null>
daemon_init: listen on ldap:///
daemon_init: 1 listeners to open...
ldap_url_parse_ext(ldap:///)
daemon: listener initialized ldap:///
daemon_init: 2 listeners opened
ldap_create
slapd init: initiated server.
slap_sasl_init: initialized!
bdb_back_initialize: initialize BDB backend
bdb_back_initialize: Berkeley DB 4.7.25: (March  5, 2012)
hdb_back_initialize: initialize HDB backend
hdb_back_initialize: Berkeley DB 4.7.25: (March  5, 2012)
null_back_initialize: initialize null backend
backend_startup_one: starting "cn=config"
ldif_read_file: read entry file: "/etc/openldap/slapd.d/cn=config.ldif"
=> str2entry: "dn: cn=config
objectClass: olcGlobal
cn: config
olcConfigFile: /etc/openldap/slapd.conf
olcConfigDir: /etc/openldap/slapd.d
olcAllows: bind_v2
olcArgsFile: /var/run/openldap/slapd.args
olcAttributeOptions: lang-
olcAuthzPolicy: none
olcConcurrency: 0
olcConnMaxPending: 100
olcConnMaxPendingAuth: 1000
olcGentleHUP: FALSE
olcIdleTimeout: 0
olcTLSCACertificateFile: /etc/pki/tls/certs/ca-bundle.crt
olcTLSCertificateFile: /etc/pki/tls/certs/slapd.pem
olcTLSCertificateKeyFile: /etc/pki/tls/certs/slapd.pem
olcIndexSubstrIfMaxLen: 4
olcIndexSubstrIfMinLen: 2
olcIndexSubstrAnyLen: 4
olcIndexSubstrAnyStep: 2
olcLocalSSF: 71
olcLogLevel: Stats
olcPidFile: /var/run/openldap/slapd.pid
olcReadOnly: FALSE
olcReplicationInterval: 0
olcReverseLookup: FALSE
olcSaslHost: htcRadius1.htc.internal
olcSaslSecProps: noplain,noanonymous
olcSockbufMaxIncoming: 262143
olcSockbufMaxIncomingAuth: 16777215
olcThreads: 16
olcTLSCRLCheck: none
olcTLSVerifyClient: never
olcToolThreads: 1
structuralObjectClass: olcGlobal
entryUUID: ac065c7c-c861-1031-9bc9-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
entryCSN: 20121121195915Z#000000#00#000000
modifiersName: cn=config
modifyTimestamp: 20121121195915Z
"
...
...
...
dnPrettyNormal: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnPrettyNormal: <cn=config>, <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn=config) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn=config" "objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
olcTLSCRLCheck: value #0: keyword <TLSCRLCheck> ignored
olcTLSCRLCheck: value #0: keyword <TLSCRLCheck> ignored
olcReplicationInterval: value #0: <olcReplicationInterval> keyword is
obsolete (ignored)
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=include{0}.ldif"
=> str2entry: "dn: cn=include{0}
objectClass: olcIncludeFile
cn: include{0}
olcInclude: /etc/openldap/schema/core.schema
structuralObjectClass: olcIncludeFile
entryUUID: ac0c28d2-c861-1031-9bca-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
entryCSN: 20121121195915Z#000000#00#000000
modifiersName: cn=config
modifyTimestamp: 20121121195915Z
"
...
...
...
dnPrettyNormal: <cn=include{0}>
=> ldap_bv2dn(cn=include{0},0)
<= ldap_bv2dn(cn=include{0})=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=include{0})=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=include{0})=0
<<< dnPrettyNormal: <cn=include{0}>, <cn=include{0}>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn=include{0}) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn=include{0},cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=include{1}.ldif"
=> str2entry: "dn: cn=include{1}
objectClass: olcIncludeFile
cn: include{1}
olcInclude: /etc/openldap/schema/cosine.schema
structuralObjectClass: olcIncludeFile
entryUUID: ac0c434e-c861-1031-9bcb-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
entryCSN: 20121121195915Z#000000#00#000000
modifiersName: cn=config
modifyTimestamp: 20121121195915Z
"
...
...
...
dnPrettyNormal: <cn=include{1}>
=> ldap_bv2dn(cn=include{1},0)
<= ldap_bv2dn(cn=include{1})=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=include{1})=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=include{1})=0
<<< dnPrettyNormal: <cn=include{1}>, <cn=include{1}>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn=include{1}) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn=include{1},cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=include{2}.ldif"
=> str2entry: "dn: cn=include{2}
objectClass: olcIncludeFile
cn: include{2}
olcInclude: /etc/openldap/schema/inetorgperson.schema
structuralObjectClass: olcIncludeFile
entryUUID: ac0c54f6-c861-1031-9bcc-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
entryCSN: 20121121195915Z#000000#00#000000
modifiersName: cn=config
modifyTimestamp: 20121121195915Z
"
...
...
...
dnPrettyNormal: <cn=include{2}>
=> ldap_bv2dn(cn=include{2},0)
<= ldap_bv2dn(cn=include{2})=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=include{2})=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=include{2})=0
<<< dnPrettyNormal: <cn=include{2}>, <cn=include{2}>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn=include{2}) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn=include{2},cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=include{3}.ldif"
=> str2entry: "dn: cn=include{3}
objectClass: olcIncludeFile
cn: include{3}
olcInclude: /etc/openldap/schema/nis.schema
structuralObjectClass: olcIncludeFile
entryUUID: ac0c6496-c861-1031-9bcd-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
entryCSN: 20121121195915Z#000000#00#000000
modifiersName: cn=config
modifyTimestamp: 20121121195915Z
"
...
...
...
dnPrettyNormal: <cn=include{3}>
=> ldap_bv2dn(cn=include{3},0)
<= ldap_bv2dn(cn=include{3})=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=include{3})=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=include{3})=0
<<< dnPrettyNormal: <cn=include{3}>, <cn=include{3}>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn=include{3}) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn=include{3},cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=schema.ldif"
=> str2entry: "dn: cn=schema
objectClass: olcSchemaConfig
cn: schema
olcObjectIdentifier: OLcfg 1.3.6.1.4.1.4203.666.11.1
olcObjectIdentifier: OLcfgAt OLcfg:3
olcObjectIdentifier: OLcfgGlAt OLcfgAt:0
olcObjectIdentifier: OLcfgBkAt OLcfgAt:1
olcObjectIdentifier: OLcfgDbAt OLcfgAt:2
olcObjectIdentifier: OLcfgOvAt OLcfgAt:3
olcObjectIdentifier: OLcfgOc OLcfg:4
olcObjectIdentifier: OLcfgGlOc OLcfgOc:0
olcObjectIdentifier: OLcfgBkOc OLcfgOc:1
olcObjectIdentifier: OLcfgDbOc OLcfgOc:2
olcObjectIdentifier: OLcfgOvOc OLcfgOc:3
olcObjectIdentifier: OMsyn 1.3.6.1.4.1.1466.115.121.1
olcObjectIdentifier: OMsInteger OMsyn:27
olcObjectIdentifier: OMsBoolean OMsyn:7
olcObjectIdentifier: OMsDN OMsyn:12
olcObjectIdentifier: OMsDirectoryString OMsyn:15
olcObjectIdentifier: OMsOctetString OMsyn:40
olcAttributeTypes: ( 2.5.4.0 NAME 'objectClass' DESC 'RFC2256: object
classes
 of the entity' EQUALITY objectIdentifierMatch SYNTAX
1.3.6.1.4.1.1466.115.121
 .1.38 )
olcAttributeTypes: ( 2.5.21.9 NAME 'structuralObjectClass' DESC
'X.500(93): st
 ructural object class of entry' EQUALITY objectIdentifierMatch SYNTAX
1.3.6.1
 .4.1.1466.115.121.1.38 SINGLE-VALUE NO-USER-MODIFICATION USAGE
directoryOpera
 tion )
olcAttributeTypes: ( 2.5.18.1 NAME 'createTimestamp' DESC 'RFC2252: time
which
  object was created' EQUALITY generalizedTimeMatch ORDERING
generalizedTimeOr
 deringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE
NO-USER-MODIFIC
 ATION USAGE directoryOperation )
olcAttributeTypes: ( 2.5.18.2 NAME 'modifyTimestamp' DESC 'RFC2252: time
which
  object was last modified' EQUALITY generalizedTimeMatch ORDERING
generalized
 TimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE
NO-USER-M
 ODIFICATION USAGE directoryOperation )
olcAttributeTypes: ( 2.5.18.3 NAME 'creatorsName' DESC 'RFC2252: name of
creat
 or' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
SING
 LE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )
olcAttributeTypes: ( 2.5.18.4 NAME 'modifiersName' DESC 'RFC2252: name of
last
  modifier' EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.
 12 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )
olcAttributeTypes: ( 2.5.18.9 NAME 'hasSubordinates' DESC 'X.501: entry
has ch
 ildren' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALU
 E NO-USER-MODIFICATION USAGE directoryOperation )
olcAttributeTypes: ( 2.5.18.10 NAME 'subschemaSubentry' DESC 'RFC2252:
name of
  controlling subschema entry' EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.
 4.1.1466.115.121.1.12 SINGLE-VALUE NO-USER-MODIFICATION USAGE
directoryOperat
 ion )
olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.33 NAME 'entryDN' DESC 'DN of
the
 entry' EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.12 S
 INGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )
olcAttributeTypes: ( 1.3.6.1.1.16.4 NAME 'entryUUID' DESC 'UUID of the
entry'
 EQUALITY UUIDMatch ORDERING UUIDOrderingMatch SYNTAX 1.3.6.1.1.16.1
SINGLE-VA
 LUE NO-USER-MODIFICATION USAGE directoryOperation )
olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.7 NAME 'entryCSN' DESC 'change
seq
 uence number of the entry content' EQUALITY CSNMatch ORDERING
CSNOrderingMatc
 h SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE
NO-USER-MODIFICATION US
 AGE directoryOperation )
olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.13 NAME 'namingCSN' DESC
'change s
 equence number of the entry naming (RDN)' EQUALITY CSNMatch ORDERING
CSNOrder
 ingMatch SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE
NO-USER-MODIFICA
 TION USAGE directoryOperation )
olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.23 NAME 'syncreplCookie' DESC
'syn
 crepl Cookie for shadow copy' EQUALITY octetStringMatch ORDERING
octetStringO
 rderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE
NO-USER-MODIFI
 CATION USAGE dSAOperation )
olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.1.25 NAME 'contextCSN' DESC 'the
lar
 gest committed CSN of a context' EQUALITY CSNMatch ORDERING
CSNOrderingMatch
 SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE NO-USER-MODIFI>>>
dnPrettyNormal: <cn=schema>
=> ldap_bv2dn(cn=schema,0)
<= ldap_bv2dn(cn=schema)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=schema)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=schema)=0
<<< dnPrettyNormal: <cn=schema>, <cn=schema>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn=schema) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn=schema,cn=config" "objectClass"
requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=schema/cn={0}core.ldif"
=> str2entry: "dn: cn={0}core
objectClass: olcSchemaConfig
cn: {0}core
olcAttributeTypes: {0}( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256:
kno
 wledge information' EQUALITY caseIgnoreMatch SYNTAX
1.3.6.1.4.1.1466.115.121.
 1.15{32768} )
olcAttributeTypes: {1}( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256:
last (f
 amily) name(s) for which the entity is known by' SUP name )
olcAttributeTypes: {2}( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial
numb
 er of the entity' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} )
olcAttributeTypes: {3}( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC2256:
ISO-
 3166 country 2-letter code' SUP name SINGLE-VALUE )
olcAttributeTypes: {4}( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256:
loc
 ality which this object resides in' SUP name )
olcAttributeTypes: {5}( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC
'RFC2
 256: state or province which this object resides in' SUP name )
olcAttributeTypes: {6}( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC
'RFC225
 6: street address of this object' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreS
 ubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
olcAttributeTypes: {7}( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC
'RFC2256
 : organization this object belongs to' SUP name )
olcAttributeTypes: {8}( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' )
DESC '
 RFC2256: organizational unit this object belongs to' SUP name )
olcAttributeTypes: {9}( 2.5.4.12 NAME 'title' DESC 'RFC2256: title
associated
 with the entity' SUP name )
olcAttributeTypes: {10}( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search
gui
 de, deprecated by enhancedSearchGuide' SYNTAX
1.3.6.1.4.1.1466.115.121.1.25 )
olcAttributeTypes: {11}( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256:
busin
 ess category' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15{128} )
olcAttributeTypes: {12}( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256:
postal a
 ddress' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch
SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.41 )
olcAttributeTypes: {13}( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal
code
 ' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.
 1.1466.115.121.1.15{40} )
olcAttributeTypes: {14}( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post
Off
 ice Box' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3
 .6.1.4.1.1466.115.121.1.15{40} )
olcAttributeTypes: {15}( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC
'RFC2
 256: Physical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR
caseIgnor
 eSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
olcAttributeTypes: {16}( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256:
Teleph
 one Number' EQUALITY telephoneNumberMatch SUBSTR
telephoneNumberSubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} )
olcAttributeTypes: {17}( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex
Numb
 er' SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 )
olcAttributeTypes: {18}( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC
'RFC22
 56: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 )
olcAttributeTypes: {19}( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax'
) DE
 SC 'RFC2256: Facsimile (Fax) Telephone Number' SYNTAX
1.3.6.1.4.1.1466.115.12
 1.1.22 )
olcAttributeTypes: {20}( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121
Addr
 ess' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch
SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.36{15} )
olcAttributeTypes: {21}( 2.5.4.25 NAME 'internationaliSDNNumber' DESC
'RFC2256
 : international ISDN number' EQUALITY numericStringMatch SUBSTR
numericString
 SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} )
olcAttributeTypes: {22}( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256:
regi
 stered postal address' SUP postalAddress SYNTAX
1.3.6.1.4.1.1466.115.121.1.41
  )
olcAttributeTypes: {23}( 2.5.4.27 NAME 'destinationIndicator' DESC
'RFC2256: d
 estination indicator' EQUALITY caseIgnoreMatch SUBSTR cas>>>
dnPrettyNormal: <cn={0}core>
=> ldap_bv2dn(cn={0}core,0)
<= ldap_bv2dn(cn={0}core)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={0}core)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={0}core)=0
<<< dnPrettyNormal: <cn={0}core>, <cn={0}core>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn={0}core) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn={0}core,cn=schema,cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=schema/cn={1}cosine.ldif"
=> str2entry: "dn: cn={1}cosine
objectClass: olcSchemaConfig
cn: {1}cosine
olcAttributeTypes: {0}( 0.9.2342.19200300.100.1.2 NAME
'textEncodedORAddress'
 EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.
 1466.115.121.1.15{256} )
olcAttributeTypes: {1}( 0.9.2342.19200300.100.1.4 NAME 'info' DESC
'RFC1274: g
 eneral information' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} )
olcAttributeTypes: {2}( 0.9.2342.19200300.100.1.5 NAME ( 'drink'
'favouriteDri
 nk' ) DESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR
caseIgno
 reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {3}( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC
'RFC1
 274: room number' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {4}( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC
'RFC1274:
 photo (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} )
olcAttributeTypes: {5}( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC
'RFC12
 74: category of user' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {6}( 0.9.2342.19200300.100.1.9 NAME 'host' DESC
'RFC1274: h
 ost computer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {7}( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC
'RFC127
 4: DN of manager' EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.1466.115
 .121.1.12 )
olcAttributeTypes: {8}( 0.9.2342.19200300.100.1.11 NAME
'documentIdentifier' D
 ESC 'RFC1274: unique identifier of document' EQUALITY caseIgnoreMatch
SUBSTR
 caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {9}( 0.9.2342.19200300.100.1.12 NAME 'documentTitle'
DESC '
 RFC1274: title of document' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSubstri
 ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {10}( 0.9.2342.19200300.100.1.13 NAME 'documentVersion'
DES
 C 'RFC1274: version of document' EQUALITY caseIgnoreMatch SUBSTR
caseIgnoreSu
 bstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {11}( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor'
DESC
  'RFC1274: DN of author of document' EQUALITY distinguishedNameMatch
SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.12 )
olcAttributeTypes: {12}( 0.9.2342.19200300.100.1.15 NAME
'documentLocation' DE
 SC 'RFC1274: location of document original' EQUALITY caseIgnoreMatch
SUBSTR c
 aseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {13}( 0.9.2342.19200300.100.1.20 NAME ( 'homePhone'
'homeTe
 lephoneNumber' ) DESC 'RFC1274: home telephone number' EQUALITY
telephoneNumb
 erMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121
 .1.50 )
olcAttributeTypes: {14}( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC
'RFC
 1274: DN of secretary' EQUALITY distinguishedNameMatch SYNTAX
1.3.6.1.4.1.146
 6.115.121.1.12 )
olcAttributeTypes: {15}( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox'
SYNTAX
  1.3.6.1.4.1.1466.115.121.1.39 )
olcAttributeTypes: {16}( 0.9.2342.19200300.100.1.26 NAME 'aRecord'
EQUALITY ca
 seIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {17}( 0.9.2342.19200300.100.1.27 NAME 'mDRecord'
EQUALITY c
 aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {18}( 0.9.2342.19200300.100.1.28 NAME 'mXRecord'
EQUALITY c
 aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {19}( 0.9.2342.19200300.100.1.29 NAME 'nSRecord'
EQUALITY c
 aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {20}( 0.9.2342.19200300.100.1.30 NAME 'sOARecord'
EQUALITY
 caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {21}( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord'
EQUALIT
 Y caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {22}( 0.9.2342.19200300.100.1.38 NAM>>> dnPrettyNormal:
<cn={1}cosine>
=> ldap_bv2dn(cn={1}cosine,0)
<= ldap_bv2dn(cn={1}cosine)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={1}cosine)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={1}cosine)=0
<<< dnPrettyNormal: <cn={1}cosine>, <cn={1}cosine>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn={1}cosine) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn={1}cosine,cn=schema,cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=schema/cn={2}inetorgperson.ldif"
=> str2entry: "dn: cn={2}inetorgperson
objectClass: olcSchemaConfig
cn: {2}inetorgperson
olcAttributeTypes: {0}( 2.16.840.1.113730.3.1.1 NAME 'carLicense' DESC
'RFC279
 8: vehicle license or registration plate' EQUALITY caseIgnoreMatch SUBSTR
cas
 eIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {1}( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber'
DESC '
 RFC2798: identifies a department within an organization' EQUALITY
caseIgnoreM
 atch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {2}( 2.16.840.1.113730.3.1.241 NAME 'displayName' DESC
'RFC
 2798: preferred name to be used when displaying entries' EQUALITY
caseIgnoreM
 atch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15 SI
 NGLE-VALUE )
olcAttributeTypes: {3}( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber' DESC
'RF
 C2798: numerically identifies an employee within an organization'
EQUALITY ca
 seIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.12
 1.1.15 SINGLE-VALUE )
olcAttributeTypes: {4}( 2.16.840.1.113730.3.1.4 NAME 'employeeType' DESC
'RFC2
 798: type of employment for a person' EQUALITY caseIgnoreMatch SUBSTR
caseIgn
 oreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {5}( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto' DESC
'RFC2
 798: a JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 )
olcAttributeTypes: {6}( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage'
DESC
  'RFC2798: preferred written or spoken language for a person' EQUALITY
caseIg
 noreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.
 15 SINGLE-VALUE )
olcAttributeTypes: {7}( 2.16.840.1.113730.3.1.40 NAME
'userSMIMECertificate' D
 ESC 'RFC2798: PKCS#7 SignedData used to support S/MIME' SYNTAX
1.3.6.1.4.1.14
 66.115.121.1.5 )
olcAttributeTypes: {8}( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12' DESC
'RFC2
 798: personal identity information, a PKCS #12 PFX' SYNTAX
1.3.6.1.4.1.1466.1
 15.121.1.5 )
olcObjectClasses: {0}( 2.16.840.1.113730.3.2.2 NAME 'inetOrgPerson' DESC
'RFC2
 798: Internet Organizational Person' SUP organizationalPerson STRUCTURAL
MAY
 ( audio $ businessCategory $ carLicense $ departmentNumber $ displayName
$ em
 ployeeNumber $ employeeType $ givenName $ homePhone $ homePostalAddress $
ini
 tials $ jpegPhoto $ labeledURI $ mail $ manager $ mobile $ o $ pager $
photo
 $ roomNumber $ secretary $ uid $ userCertificate $ x500uniqueIdentifier $
pre
 ferredLanguage $ userSMIMECertificate $ userPKCS12 ) )
structuralObjectClass: olcSchemaConfig
entryUUID: ac0d4294-c861-1031-9bd1-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
entryCSN: 20121121195915Z#000000#00#000000
modifiersName: cn=config
modifyTimestamp: 20121121195915Z
"
...
...
...
dnPrettyNormal: <cn={2}inetorgperson>
=> ldap_bv2dn(cn={2}inetorgperson,0)
<= ldap_bv2dn(cn={2}inetorgperson)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={2}inetorgperson)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={2}inetorgperson)=0
<<< dnPrettyNormal: <cn={2}inetorgperson>, <cn={2}inetorgperson>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn={2}inetorgperson) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to
"cn={2}inetorgperson,cn=schema,cn=config" "objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=schema/cn={3}nis.ldif"
=> str2entry: "dn: cn={3}nis
objectClass: olcSchemaConfig
cn: {3}nis
olcAttributeTypes: {0}( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS
field; th
 e common name' EQUALITY caseIgnoreIA5Match SUBSTR
caseIgnoreIA5SubstringsMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
olcAttributeTypes: {1}( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The
absolut
 e path to the home directory' EQUALITY caseExactIA5Match SYNTAX
1.3.6.1.4.1.1
 466.115.121.1.26 SINGLE-VALUE )
olcAttributeTypes: {2}( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path
to th
 e login shell' EQUALITY caseExactIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.2
 6 SINGLE-VALUE )
olcAttributeTypes: {3}( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY
integ
 erMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {4}( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY
integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {5}( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY
integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {6}( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY
integerM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {7}( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY
integer
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {8}( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY
integerM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {9}( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY
integerMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {10}( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY
caseExactI
 A5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.
 26 )
olcAttributeTypes: {11}( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup'
EQUALITY ca
 seExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.11
 5.121.1.26 )
olcAttributeTypes: {12}( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC
'Netgr
 oup triple' SYNTAX 1.3.6.1.1.1.0.0 )
olcAttributeTypes: {13}( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' EQUALITY
intege
 rMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {14}( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' SUP
name )
olcAttributeTypes: {15}( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' EQUALITY
int
 egerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {16}( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' EQUALITY
integer
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {17}( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IP
address
 ' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
olcAttributeTypes: {18}( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP
netw
 ork' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{128} SI
 NGLE-VALUE )
olcAttributeTypes: {19}( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP
netm
 ask' EQUALITY caseIgnoreIA5Match SYNTAX
1.3.6.1.4.1.1466.115.121.1.26{128} SI
 NGLE-VALUE )
olcAttributeTypes: {20}( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC
address'
  EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
olcAttributeTypes: {21}( 1.3.6.1.1.1.1.23 NAME 'bootParameter' DESC
'rpc.bootp
 aramd parameter' SYNTAX 1.3.6.1.1.1.0.1 )
olcAttributeTypes: {22}( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image
nam
 e' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {23}( 1.3.6.1.1.1.1.26 NAME 'nisMapName' SUP name )
olcAttributeTypes: {24}( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' EQUALITY
caseExac
 tIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.
 1.26{1024} SINGLE-VALUE )
olcObjectClasses: {0}( 1.3.6.1.1.1.2.0 NAME 'posixAccount' DESC
'Abstraction o
 f an account with POSIX attributes' SUP top AUXILIARY MUST ( cn $ uid $
uidNu
 mber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $
gecos $
 description ) )
olcObjectClasses: {1}( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' DESC
'Additional a
 ttributes for shadow passwords'>>> dnPrettyNormal: <cn={3}nis>
=> ldap_bv2dn(cn={3}nis,0)
<= ldap_bv2dn(cn={3}nis)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={3}nis)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={3}nis)=0
<<< dnPrettyNormal: <cn={3}nis>, <cn={3}nis>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn={3}nis) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn={3}nis,cn=schema,cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/cn=schema/cn={4}ad.ldif"
=> str2entry: "dn: cn={4}AD
objectClass: olcSchemaConfig
cn: {4}AD
olcAttributeTypes: {0}( 1.2.840.113556.1.2.447   NAME 'mailNickname'
SYNTAX
 1.3.6.1.4.1.1466.115.121.1.15   SINGLE-VALUE )
olcAttributeTypes: {1}( 1.2.840.113556.1.4.782   NAME 'objectCategory'
SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.12   SINGLE-VALUE )
olcAttributeTypes: {2}( 1.2.840.113556.1.4.221   NAME 'sAMAccountName'
SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15   SINGLE-VALUE )
olcObjectClasses: {0}( 1.2.840.113556.1.5.9   NAME 'user'   SUP
organizational
 Person STRUCTURAL   MAY ( objectCategory $ mailNickname $ sAMAccountName
$ di
 splayName $ mail ) )
olcObjectClasses: {1}( 1.2.840.113556.1.3.23   NAME 'container'   SUP top
STRU
 CTURAL   MUST cn  )
structuralObjectClass: olcSchemaConfig
entryUUID: 6feaa26c-cf6d-1031-986d-79eaa697be5e
creatorsName: cn=config
createTimestamp: 20121130191106Z
entryCSN: 20121130191106Z#000000#00#000000
modifiersName: cn=config
modifyTimestamp: 20121130191106Z
"
...
...
...
dnPrettyNormal: <cn={4}AD>
=> ldap_bv2dn(cn={4}AD,0)
<= ldap_bv2dn(cn={4}AD)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={4}AD)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn={4}ad)=0
<<< dnPrettyNormal: <cn={4}AD>, <cn={4}ad>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(cn={4}AD) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "cn={4}AD,cn=schema,cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/olcDatabase={-1}frontend.ldif"
=> str2entry: "dn: olcDatabase={-1}frontend
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: {-1}frontend
olcLastMod: TRUE
olcMaxDerefDepth: 0
olcReadOnly: FALSE
olcSchemaDN: cn=Subschema
structuralObjectClass: olcDatabaseConfig
entryUUID: ac0d771e-c861-1031-9bd3-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
olcTimeLimit: unlimited
olcSizeLimit: unlimited
entryCSN: 20121214201101.233668Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20121214201101Z
"
...
...
...
dnPrettyNormal: <olcDatabase={-1}frontend>
=> ldap_bv2dn(olcDatabase={-1}frontend,0)
<= ldap_bv2dn(olcDatabase={-1}frontend)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={-1}frontend)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={-1}frontend)=0
<<< dnPrettyNormal: <olcDatabase={-1}frontend>, <olcDatabase={-1}frontend>
...
...
...
dnNormalize: <cn=Subschema>
=> ldap_bv2dn(cn=Subschema,0)
<= ldap_bv2dn(cn=Subschema)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=subschema)=0
<<< dnNormalize: <cn=subschema>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=admin,cn=config>
=> ldap_bv2dn(cn=admin,cn=config,0)
<= ldap_bv2dn(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
<<< dnNormalize: <cn=admin,cn=config>
<= str2entry(olcDatabase={-1}frontend) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "olcDatabase={-1}frontend,cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
...
...
...
dnPrettyNormal: <cn=Subschema>
=> ldap_bv2dn(cn=Subschema,0)
<= ldap_bv2dn(cn=Subschema)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Subschema)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=subschema)=0
<<< dnPrettyNormal: <cn=Subschema>, <cn=subschema>
...
...
...
dnPrettyNormal: <cn=Subschema>
=> ldap_bv2dn(cn=Subschema,0)
<= ldap_bv2dn(cn=Subschema)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Subschema)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=subschema)=0
<<< dnPrettyNormal: <cn=Subschema>, <cn=subschema>
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/olcDatabase={0}config.ldif"
=> str2entry: "dn: olcDatabase={0}config
objectClass: olcDatabaseConfig
olcDatabase: {0}config
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=admin,cn=config
olcRootPW:: Y29uZmln
structuralObjectClass: olcDatabaseConfig
entryUUID: ac0d8a60-c861-1031-9bd4-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
entryCSN: 20121121195915Z#000000#00#000000
modifiersName: cn=config
modifyTimestamp: 20121121195915Z
"
...
...
...
dnPrettyNormal: <olcDatabase={0}config>
=> ldap_bv2dn(olcDatabase={0}config,0)
<= ldap_bv2dn(olcDatabase={0}config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={0}config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={0}config)=0
<<< dnPrettyNormal: <olcDatabase={0}config>, <olcDatabase={0}config>
...
...
...
dnNormalize: <cn=admin,cn=config>
=> ldap_bv2dn(cn=admin,cn=config,0)
<= ldap_bv2dn(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
<<< dnNormalize: <cn=admin,cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(olcDatabase={0}config) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "olcDatabase={0}config,cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
...
...
...
dnPrettyNormal: <cn=admin,cn=config>
=> ldap_bv2dn(cn=admin,cn=config,0)
<= ldap_bv2dn(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
<<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config>
...
...
...
dnPrettyNormal: <cn=admin,cn=config>
=> ldap_bv2dn(cn=admin,cn=config,0)
<= ldap_bv2dn(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
<<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config>
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/olcDatabase={1}bdb.ldif"
=> str2entry: "dn: olcDatabase={1}bdb
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: {1}bdb
olcSuffix: dc=htc,dc=com
olcAccess: {0}to *  by
dn.base="uid=push-master,cn=nupointproxy,dc=internal" w
 rite  by * +0 break
olcAccess: {1}to dn.base=""  by * read
olcAccess: {2}to dn.base="cn=subschema"  by * read
olcAccess: {3}to dn.subtree="cn=monitor"  by users read  by * none
olcAccess: {4}to *  by self write  by * read
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootPW:: e1NIQX01ZW42RzZNZXpScm9UM1hLcWtkUE9tWS9CZlE9
olcDbDirectory: /var/lib/ldap/htc.com
olcDbCacheSize: 150000
olcDbCheckpoint: 102400 1
olcDbConfig: {0}set_cachesize 0 268435465 1
olcDbConfig: {1}set_lg_bsize 2097152
olcDbConfig: {2}set_lg_regionmax 262144
olcDbConfig: {3}set_flags DB_LOG_AUTOREMOVE
olcDbNoSync: TRUE
olcDbDirtyRead: FALSE
olcDbIDLcacheSize: 150000
olcDbIndex: objectClass pres,eq
olcDbIndex: cn pres,eq,sub
olcDbIndex: ou pres,eq,sub
olcDbIndex: mail pres,eq,sub
olcDbIndex: sn pres,eq,sub
olcDbIndex: givenName pres,eq,sub
olcDbLinearIndex: FALSE
olcDbMode: 384
olcDbSearchStack: 16
olcDbShmKey: 12321
olcDbCacheFree: 1
structuralObjectClass: olcBdbConfig
entryUUID: ac0da28e-c861-1031-9bd5-5591ba7dfe32
creatorsName: cn=config
createTimestamp: 20121121195915Z
olcRootDN: uid=Manager,dc=htc,dc=com
olcUpdateDN: uid=Push-Master,cn=NupointProxy,dc=internal
entryCSN: 20121212180425.846656Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20121212180425Z
"
...
...
...
dnPrettyNormal: <olcDatabase={1}bdb>
=> ldap_bv2dn(olcDatabase={1}bdb,0)
<= ldap_bv2dn(olcDatabase={1}bdb)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={1}bdb)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={1}bdb)=0
<<< dnPrettyNormal: <olcDatabase={1}bdb>, <olcDatabase={1}bdb>
...
...
...
dnNormalize: <dc=htc,dc=com>
=> ldap_bv2dn(dc=htc,dc=com,0)
<= ldap_bv2dn(dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=htc,dc=com)=0
<<< dnNormalize: <dc=htc,dc=com>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <uid=Manager,dc=htc,dc=com>
=> ldap_bv2dn(uid=Manager,dc=htc,dc=com,0)
<= ldap_bv2dn(uid=Manager,dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=manager,dc=htc,dc=com)=0
<<< dnNormalize: <uid=manager,dc=htc,dc=com>
...
...
...
dnNormalize: <cn=admin,cn=config>
=> ldap_bv2dn(cn=admin,cn=config,0)
<= ldap_bv2dn(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
<<< dnNormalize: <cn=admin,cn=config>
<= str2entry(olcDatabase={1}bdb) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "olcDatabase={1}bdb,cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
...
...
...
dnPrettyNormal: <dc=htc,dc=com>
=> ldap_bv2dn(dc=htc,dc=com,0)
<= ldap_bv2dn(dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=htc,dc=com)=0
<<< dnPrettyNormal: <dc=htc,dc=com>, <dc=htc,dc=com>
...
...
...
dnPrettyNormal: <uid=Manager,dc=htc,dc=com>
=> ldap_bv2dn(uid=Manager,dc=htc,dc=com,0)
<= ldap_bv2dn(uid=Manager,dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=Manager,dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=manager,dc=htc,dc=com)=0
<<< dnPrettyNormal: <uid=Manager,dc=htc,dc=com>,
<uid=manager,dc=htc,dc=com>
...
...
...
dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>
=> ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal,0)
<= ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=Push-Master,cn=NupointProxy,dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=push-master,cn=nupointproxy,dc=internal)=0
<<< dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>,
<uid=push-master,cn=nupointproxy,dc=internal>
bdb_db_init: Initializing BDB database
...
...
...
dnPrettyNormal: <dc=htc,dc=com>
=> ldap_bv2dn(dc=htc,dc=com,0)
<= ldap_bv2dn(dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=htc,dc=com)=0
<<< dnPrettyNormal: <dc=htc,dc=com>, <dc=htc,dc=com>
...
...
...
dnNormalize: <uid=push-master,cn=nupointproxy,dc=internal>
=> ldap_bv2dn(uid=push-master,cn=nupointproxy,dc=internal,0)
<= ldap_bv2dn(uid=push-master,cn=nupointproxy,dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=push-master,cn=nupointproxy,dc=internal)=0
<<< dnNormalize: <uid=push-master,cn=nupointproxy,dc=internal>
Backend ACL: access to *
   by dn.base="uid=push-master,cn=nupointproxy,dc=internal" write
   by * +0 break
/etc/openldap/slapd.d: line 1: warning: cannot assess the validity of the
ACL scope within backend naming context
...
...
...
dnNormalize: <>
<<< dnNormalize: <>
Backend ACL: access to dn.base=""
   by * read
/etc/openldap/slapd.d: line 1: warning: ACL appears to be out of scope
within backend naming context
...
...
...
dnNormalize: <cn=subschema>
=> ldap_bv2dn(cn=subschema,0)
<= ldap_bv2dn(cn=subschema)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=subschema)=0
<<< dnNormalize: <cn=subschema>
Backend ACL: access to dn.base="cn=subschema"
   by * read
/etc/openldap/slapd.d: line 1: warning: ACL appears to be out of scope
within backend naming context
...
...
...
dnNormalize: <cn=monitor>
=> ldap_bv2dn(cn=monitor,0)
<= ldap_bv2dn(cn=monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=monitor)=0
<<< dnNormalize: <cn=monitor>
Backend ACL: access to dn.subtree="cn=monitor"
   by users read
   by * none
/etc/openldap/slapd.d: line 1: warning: ACL appears to be out of scope
within backend naming context
Backend ACL: access to *
   by self write
   by * read
/etc/openldap/slapd.d: line 1: warning: cannot assess the validity of the
ACL scope within backend naming context
...
...
...
dnPrettyNormal: <uid=Manager,dc=htc,dc=com>
=> ldap_bv2dn(uid=Manager,dc=htc,dc=com,0)
<= ldap_bv2dn(uid=Manager,dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=Manager,dc=htc,dc=com)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=manager,dc=htc,dc=com)=0
<<< dnPrettyNormal: <uid=Manager,dc=htc,dc=com>,
<uid=manager,dc=htc,dc=com>
...
...
...
dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>
=> ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal,0)
<= ldap_bv2dn(uid=Push-Master,cn=NupointProxy,dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=Push-Master,cn=NupointProxy,dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=push-master,cn=nupointproxy,dc=internal)=0
<<< dnPrettyNormal: <uid=Push-Master,cn=NupointProxy,dc=internal>,
<uid=push-master,cn=nupointproxy,dc=internal>
index objectClass 0x0006
index cn 0x0716
index ou 0x0716
index mail 0x0716
index sn 0x0716
index givenName 0x0716
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/olcDatabase={2}bdb.ldif"
=> str2entry: "dn: olcDatabase={2}bdb
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: {2}bdb
olcSuffix: dc=internal
olcAddContentAcl: FALSE
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=admin,cn=config
olcSyncUseSubentry: FALSE
olcMonitoring: TRUE
olcDbDirectory: /var/lib/ldap/htc.internal
olcDbCacheSize: 1000
olcDbCheckpoint: 100 63
olcDbNoSync: FALSE
olcDbDirtyRead: FALSE
olcDbIDLcacheSize: 0
olcDbLinearIndex: FALSE
olcDbMode: 0600
olcDbSearchStack: 16
olcDbShmKey: 0
olcDbCacheFree: 1
olcDbDNcacheSize: 0
structuralObjectClass: olcBdbConfig
entryUUID: 92ff370e-dcc9-1031-8a59-533cee5baf07
creatorsName: cn=config
createTimestamp: 20121217191324Z
entryCSN: 20121217191324.652465Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20121217191324Z
"
...
...
...
dnPrettyNormal: <olcDatabase={2}bdb>
=> ldap_bv2dn(olcDatabase={2}bdb,0)
<= ldap_bv2dn(olcDatabase={2}bdb)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={2}bdb)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={2}bdb)=0
<<< dnPrettyNormal: <olcDatabase={2}bdb>, <olcDatabase={2}bdb>
...
...
...
dnNormalize: <dc=internal>
=> ldap_bv2dn(dc=internal,0)
<= ldap_bv2dn(dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=internal)=0
<<< dnNormalize: <dc=internal>
...
...
...
dnNormalize: <cn=admin,cn=config>
=> ldap_bv2dn(cn=admin,cn=config,0)
<= ldap_bv2dn(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
<<< dnNormalize: <cn=admin,cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(olcDatabase={2}bdb) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "olcDatabase={2}bdb,cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
...
...
...
dnPrettyNormal: <dc=internal>
=> ldap_bv2dn(dc=internal,0)
<= ldap_bv2dn(dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=internal)=0
<<< dnPrettyNormal: <dc=internal>, <dc=internal>
...
...
...
dnPrettyNormal: <cn=admin,cn=config>
=> ldap_bv2dn(cn=admin,cn=config,0)
<= ldap_bv2dn(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
<<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config>
bdb_db_init: Initializing BDB database
...
...
...
dnPrettyNormal: <dc=internal>
=> ldap_bv2dn(dc=internal,0)
<= ldap_bv2dn(dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=internal)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(dc=internal)=0
<<< dnPrettyNormal: <dc=internal>, <dc=internal>
...
...
...
dnPrettyNormal: <cn=admin,cn=config>
=> ldap_bv2dn(cn=admin,cn=config,0)
<= ldap_bv2dn(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=admin,cn=config)=0
<<< dnPrettyNormal: <cn=admin,cn=config>, <cn=admin,cn=config>
ldif_read_file: read entry file:
"/etc/openldap/slapd.d/cn=config/olcDatabase={3}monitor.ldif"
=> str2entry: "dn: olcDatabase={3}monitor
objectClass: olcDatabaseConfig
olcDatabase: {3}monitor
olcAddContentAcl: FALSE
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcSyncUseSubentry: FALSE
olcMonitoring: FALSE
structuralObjectClass: olcDatabaseConfig
entryUUID: 54da1e50-d8df-1031-85bf-235d062b63b6
creatorsName: cn=config
createTimestamp: 20121212193904Z
entryCSN: 20121212193904.665758Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20121212193904Z
"
...
...
...
dnPrettyNormal: <olcDatabase={3}monitor>
=> ldap_bv2dn(olcDatabase={3}monitor,0)
<= ldap_bv2dn(olcDatabase={3}monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={3}monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(olcDatabase={3}monitor)=0
<<< dnPrettyNormal: <olcDatabase={3}monitor>, <olcDatabase={3}monitor>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
...
...
...
dnNormalize: <cn=config>
=> ldap_bv2dn(cn=config,0)
<= ldap_bv2dn(cn=config)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=config)=0
<<< dnNormalize: <cn=config>
<= str2entry(olcDatabase={3}monitor) -> 0x7fcb0f61d108
=> test_filter
    PRESENT
=> access_allowed: search access to "olcDatabase={3}monitor,cn=config"
"objectClass" requested
<= root access granted
=> access_allowed: search access granted by manage(=mwrscxd)
<= test_filter 6
...
...
...
dnPrettyNormal: <cn=Monitor>
=> ldap_bv2dn(cn=Monitor,0)
<= ldap_bv2dn(cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=monitor)=0
<<< dnPrettyNormal: <cn=Monitor>, <cn=monitor>
send_ldap_result: conn=-1 op=0 p=0
send_ldap_result: err=0 matched="" text=""
matching_rule_use_init
    1.2.840.113556.1.4.804 (integerBitOrMatch): matchingRuleUse: (
1.2.840.113556.1.4.804 NAME 'integerBitOrMatch' APPLIES (
supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $
olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $
olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $
olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $
olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $
olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $
olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $
olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey
$ olcChainMaxReferralDepth $ olcDbProtocolVersion $
olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $
shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire
$ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    1.2.840.113556.1.4.803 (integerBitAndMatch): matchingRuleUse: (
1.2.840.113556.1.4.803 NAME 'integerBitAndMatch' APPLIES (
supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $
olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $
olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $
olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $
olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $
olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $
olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $
olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey
$ olcChainMaxReferralDepth $ olcDbProtocolVersion $
olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $
shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire
$ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    1.3.6.1.4.1.1466.109.114.2 (caseIgnoreIA5Match): matchingRuleUse: (
1.3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' APPLIES (
altServer $ olcDbConfig $ mail $ dc $ associatedDomain $ email $
aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $
janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $
memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $
macAddress $ bootFile $ nisMapEntry ) )
    1.3.6.1.4.1.1466.109.114.1 (caseExactIA5Match): matchingRuleUse: (
1.3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' APPLIES (
altServer $ olcDbConfig $ mail $ dc $ associatedDomain $ email $
aRecord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $
janetMailbox $ gecos $ homeDirectory $ loginShell $ memberUid $
memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $
macAddress $ bootFile $ nisMapEntry ) )
    2.5.13.39 (certificateListMatch):     2.5.13.38
(certificateListExactMatch): matchingRuleUse: ( 2.5.13.38 NAME
'certificateListExactMatch' APPLIES ( authorityRevocationList $
certificateRevocationList $ deltaRevocationList ) )
    2.5.13.35 (certificateMatch):     2.5.13.34 (certificateExactMatch):
matchingRuleUse: ( 2.5.13.34 NAME 'certificateExactMatch' APPLIES (
userCertificate $ cACertificate ) )
    2.5.13.30 (objectIdentifierFirstComponentMatch): matchingRuleUse: (
2.5.13.30 NAME 'objectIdentifierFirstComponentMatch' APPLIES (
supportedControl $ supportedExtension $ supportedFeatures $
ldapSyntaxes $ supportedApplicationContext ) )
    2.5.13.29 (integerFirstComponentMatch): matchingRuleUse: ( 2.5.13.29
NAME 'integerFirstComponentMatch' APPLIES ( supportedLDAPVersion $
entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending
$ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $
olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep
$ olcIndexIntLen $ olcLocalSSF $ olcMaxDerefDepth $
olcReplicationInterval $ olcSockbufMaxIncoming $
olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $
olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $
olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey $
olcChainMaxReferralDepth $ olcDbProtocolVersion $
olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $
shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire
$ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    2.5.13.27 (generalizedTimeMatch): matchingRuleUse: ( 2.5.13.27 NAME
'generalizedTimeMatch' APPLIES ( createTimestamp $ modifyTimestamp ) )
    2.5.13.24 (protocolInformationMatch): matchingRuleUse: ( 2.5.13.24
NAME 'protocolInformationMatch' APPLIES protocolInformation )
    2.5.13.23 (uniqueMemberMatch): matchingRuleUse: ( 2.5.13.23 NAME
'uniqueMemberMatch' APPLIES uniqueMember )
    2.5.13.22 (presentationAddressMatch): matchingRuleUse: ( 2.5.13.22
NAME 'presentationAddressMatch' APPLIES presentationAddress )
    2.5.13.20 (telephoneNumberMatch): matchingRuleUse: ( 2.5.13.20 NAME
'telephoneNumberMatch' APPLIES ( telephoneNumber $ homePhone $ mobile
$ pager ) )
    2.5.13.17 (octetStringMatch): matchingRuleUse: ( 2.5.13.17 NAME
'octetStringMatch' APPLIES ( userPassword $ olcDbCryptKey ) )
    2.5.13.16 (bitStringMatch): matchingRuleUse: ( 2.5.13.16 NAME
'bitStringMatch' APPLIES x500UniqueIdentifier )
    2.5.13.14 (integerMatch): matchingRuleUse: ( 2.5.13.14 NAME
'integerMatch' APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $
gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth
$ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $
olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $
olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $
olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $
olcToolThreads $ olcWriteTimeout $ olcDbCacheFree $ olcDbCacheSize $
olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbSearchStack $ olcDbShmKey
$ olcChainMaxReferralDepth $ olcDbProtocolVersion $
olcDbConnectionPoolMax $ mailPreferenceOption $ shadowLastChange $
shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire
$ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber ) )
    2.5.13.13 (booleanMatch): matchingRuleUse: ( 2.5.13.13 NAME
'booleanMatch' APPLIES ( hasSubordinates $ olcAddContentAcl $
olcGentleHUP $ olcHidden $ olcLastMod $ olcMirrorMode $ olcMonitoring
$ olcReadOnly $ olcReverseLookup $ olcSyncUseSubentry $ olcDbChecksum
$ olcDbNoSync $ olcDbDirtyRead $ olcDbLinearIndex $ olcChainCacheURI $
olcChainReturnError $ olcDbRebindAsUser $ olcDbChaseReferrals $
olcDbProxyWhoAmI $ olcDbSingleConn $ olcDbUseTemporaryConn $
olcDbNoRefs $ olcDbNoUndefFilter ) )
    2.5.13.11 (caseIgnoreListMatch): matchingRuleUse: ( 2.5.13.11 NAME
'caseIgnoreListMatch' APPLIES ( postalAddress $ registeredAddress $
homePostalAddress ) )
    2.5.13.8 (numericStringMatch): matchingRuleUse: ( 2.5.13.8 NAME
'numericStringMatch' APPLIES ( x121Address $ internationaliSDNNumber )
)
    2.5.13.7 (caseExactSubstringsMatch): matchingRuleUse: ( 2.5.13.7 NAME
'caseExactSubstringsMatch' APPLIES ( serialNumber $
destinationIndicator $ dnQualifier ) )
    2.5.13.6 (caseExactOrderingMatch): matchingRuleUse: ( 2.5.13.6 NAME
'caseExactOrderingMatch' APPLIES ( serialNumber $ destinationIndicator
$ dnQualifier ) )
    2.5.13.5 (caseExactMatch): matchingRuleUse: ( 2.5.13.5 NAME
'caseExactMatch' APPLIES ( supportedSASLMechanisms $ vendorName $
vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $
olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $
olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $
olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $
olcDisallows $ olcDitContentRules $ olcInclude $ olcLdapSyntaxes $
olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $
olcObjectClasses $ olcObjectIdentifier $ olcOverlay $
olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin
$ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $
olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $
olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm
$ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $
olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $
olcTimeLimit !
 $ olcTLSCACertificateFile $ olcTLSCACertificatePath $
olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $
olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $
olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $
olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $
olcDbLockDetect $ olcDbMode $ olcChainingBehavior $ olcDbURI $
olcDbStartTLS $ olcDbNetworkTimeout $ olcDbQuarantine $ olcDbACLPasswd $
olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $
olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $
olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbCancel $
olcDbIDAssertPassThru $ olcDbSocketPath $ olcDbSocketExtensions $
knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $
title $ businessCategory $ postalCode $ postOfficeBox $
physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials
$ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pse!
 udonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $
host $ documentIdentifier $ documentTitle $ documentVersion $
documentLocation $ personalTitle $ co $ uniqueIdentifier $
organizationalStatus $ buildingName $ documentPublisher $ carLicense $
departmentNumber $ displayName $ employeeNumber $ employeeType $
preferredLanguage $ ipServiceProtocol $ nisMapName $ mailNickname $
sAMAccountName ) )
    2.5.13.4 (caseIgnoreSubstringsMatch): matchingRuleUse: ( 2.5.13.4 NAME
'caseIgnoreSubstringsMatch' APPLIES ( serialNumber $
destinationIndicator $ dnQualifier ) )
    2.5.13.3 (caseIgnoreOrderingMatch): matchingRuleUse: ( 2.5.13.3 NAME
'caseIgnoreOrderingMatch' APPLIES ( serialNumber $
destinationIndicator $ dnQualifier ) )
    2.5.13.2 (caseIgnoreMatch): matchingRuleUse: ( 2.5.13.2 NAME
'caseIgnoreMatch' APPLIES ( supportedSASLMechanisms $ vendorName $
vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ description $
olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $
olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $
olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $
olcDisallows $ olcDitContentRules $ olcInclude $ olcLdapSyntaxes $
olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $
olcObjectClasses $ olcObjectIdentifier $ olcOverlay $
olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin
$ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $
olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $
olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm
$ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $
olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $
olcTimeLimi!
 t $ olcTLSCACertificateFile $ olcTLSCACertificatePath $
olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $
olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSVerifyClient $
olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDirectory $
olcDbCheckpoint $ olcDbCryptFile $ olcDbPageSize $ olcDbIndex $
olcDbLockDetect $ olcDbMode $ olcChainingBehavior $ olcDbURI $
olcDbStartTLS $ olcDbNetworkTimeout $ olcDbQuarantine $ olcDbACLPasswd $
olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $
olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $
olcDbTimeout $ olcDbIdleTimeout $ olcDbConnTtl $ olcDbCancel $
olcDbIDAssertPassThru $ olcDbSocketPath $ olcDbSocketExtensions $
knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $
title $ businessCategory $ postalCode $ postOfficeBox $
physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials
$ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ p!
 seudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $
host $ documentIdentifier $ documentTitle $ documentVersion $
documentLocation $ personalTitle $ co $ uniqueIdentifier $
organizationalStatus $ buildingName $ documentPublisher $ carLicense $
departmentNumber $ displayName $ employeeNumber $ employeeType $
preferredLanguage $ ipServiceProtocol $ nisMapName $ mailNickname $
sAMAccountName ) )
    1.2.36.79672281.1.13.3 (rdnMatch):     2.5.13.1
(distinguishedNameMatch): matchingRuleUse: ( 2.5.13.1 NAME
'distinguishedNameMatch' APPLIES ( creatorsName $ modifiersName $
subschemaSubentry $ entryDN $ namingContexts $ aliasedObjectName $
dynamicSubtrees $ distinguishedName $ seeAlso $ olcDefaultSearchBase $
olcRootDN $ olcSchemaDN $ olcSuffix $ olcUpdateDN $ olcDbACLAuthcDn $
olcDbIDAssertAuthcDn $ olcRelay $ member $ owner $ roleOccupant $
manager $ documentAuthor $ secretary $ associatedName $ dITRedirect $
objectCategory ) )
    2.5.13.0 (objectIdentifierMatch): matchingRuleUse: ( 2.5.13.0 NAME
'objectIdentifierMatch' APPLIES ( supportedControl $
supportedExtension $ supportedFeatures $ supportedApplicationContext )
)
slapd startup: initiated.
backend_startup_one: starting "cn=config"
config_back_db_open
Backend ACL: access to *
   by * none
config_back_db_open: line 0: warning: cannot assess the validity of the
ACL scope within backend naming context
backend_startup_one: starting "dc=htc,dc=com"
bdb_db_open: "dc=htc,dc=com"
bdb_db_open: database "dc=htc,dc=com": dbenv_open(/var/lib/ldap/htc.com).
backend_startup_one: starting "dc=internal"
bdb_db_open: "dc=internal"
bdb_db_open: warning - no DB_CONFIG file found in directory
/var/lib/ldap/htc.internal: (2).
Expect poor performance for suffix "dc=internal".
bdb_db_open: database "dc=internal":
dbenv_open(/var/lib/ldap/htc.internal).
backend_startup_one: starting "cn=Monitor"
...
...
...
dnNormalize: <cn=Monitor>
<<< dnNormalize: <cn=monitor>
...
...
...
dnPretty: <cn=Backends>
=> ldap_bv2dn(cn=Backends,0)
<= ldap_bv2dn(cn=Backends)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Backends)=0
<<< dnPretty: <cn=Backends>
...
...
...
dnNormalize: <cn=Backends>
<<< dnNormalize: <cn=backends>
...
...
...
dnPretty: <cn=Connections>
=> ldap_bv2dn(cn=Connections,0)
<= ldap_bv2dn(cn=Connections)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Connections)=0
<<< dnPretty: <cn=Connections>
...
...
...
dnNormalize: <cn=Connections>
<<< dnNormalize: <cn=connections>
...
...
...
dnPretty: <cn=Databases>
=> ldap_bv2dn(cn=Databases,0)
<= ldap_bv2dn(cn=Databases)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Databases)=0
<<< dnPretty: <cn=Databases>
...
...
...
dnNormalize: <cn=Databases>
<<< dnNormalize: <cn=databases>
...
...
...
dnPretty: <cn=Listeners>
=> ldap_bv2dn(cn=Listeners,0)
<= ldap_bv2dn(cn=Listeners)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Listeners)=0
<<< dnPretty: <cn=Listeners>
...
...
...
dnNormalize: <cn=Listeners>
<<< dnNormalize: <cn=listeners>
...
...
...
dnPretty: <cn=Log>
=> ldap_bv2dn(cn=Log,0)
<= ldap_bv2dn(cn=Log)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Log)=0
<<< dnPretty: <cn=Log>
...
...
...
dnNormalize: <cn=Log>
<<< dnNormalize: <cn=log>
...
...
...
dnPretty: <cn=Operations>
=> ldap_bv2dn(cn=Operations,0)
<= ldap_bv2dn(cn=Operations)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Operations)=0
<<< dnPretty: <cn=Operations>
...
...
...
dnNormalize: <cn=Operations>
<<< dnNormalize: <cn=operations>
...
...
...
dnPretty: <cn=Overlays>
=> ldap_bv2dn(cn=Overlays,0)
<= ldap_bv2dn(cn=Overlays)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Overlays)=0
<<< dnPretty: <cn=Overlays>
...
...
...
dnNormalize: <cn=Overlays>
<<< dnNormalize: <cn=overlays>
...
...
...
dnPretty: <cn=SASL>
=> ldap_bv2dn(cn=SASL,0)
<= ldap_bv2dn(cn=SASL)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=SASL)=0
<<< dnPretty: <cn=SASL>
...
...
...
dnNormalize: <cn=SASL>
<<< dnNormalize: <cn=sasl>
...
...
...
dnPretty: <cn=Statistics>
=> ldap_bv2dn(cn=Statistics,0)
<= ldap_bv2dn(cn=Statistics)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Statistics)=0
<<< dnPretty: <cn=Statistics>
...
...
...
dnNormalize: <cn=Statistics>
<<< dnNormalize: <cn=statistics>
...
...
...
dnPretty: <cn=Threads>
=> ldap_bv2dn(cn=Threads,0)
<= ldap_bv2dn(cn=Threads)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Threads)=0
<<< dnPretty: <cn=Threads>
...
...
...
dnNormalize: <cn=Threads>
<<< dnNormalize: <cn=threads>
...
...
...
dnPretty: <cn=Time>
=> ldap_bv2dn(cn=Time,0)
<= ldap_bv2dn(cn=Time)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Time)=0
<<< dnPretty: <cn=Time>
...
...
...
dnNormalize: <cn=Time>
<<< dnNormalize: <cn=time>
...
...
...
dnPretty: <cn=TLS>
=> ldap_bv2dn(cn=TLS,0)
<= ldap_bv2dn(cn=TLS)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=TLS)=0
<<< dnPretty: <cn=TLS>
...
...
...
dnNormalize: <cn=TLS>
<<< dnNormalize: <cn=tls>
...
...
...
dnPretty: <cn=Waiters>
=> ldap_bv2dn(cn=Waiters,0)
<= ldap_bv2dn(cn=Waiters)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Waiters)=0
<<< dnPretty: <cn=Waiters>
...
...
...
dnNormalize: <cn=Waiters>
<<< dnNormalize: <cn=waiters>
...
...
...
dnNormalize: <cn=Backend 0>
<<< dnNormalize: <cn=backend 0>
...
...
...
dnNormalize: <cn=Database 0,cn=Databases,cn=Monitor>
=> ldap_bv2dn(cn=Database 0,cn=Databases,cn=Monitor,0)
<= ldap_bv2dn(cn=Database 0,cn=Databases,cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=database 0,cn=databases,cn=monitor)=0
<<< dnNormalize: <cn=database 0,cn=databases,cn=monitor>
...
...
...
dnNormalize: <cn=Backend 1>
<<< dnNormalize: <cn=backend 1>
...
...
...
dnNormalize: <cn=Backend 2>
<<< dnNormalize: <cn=backend 2>
...
...
...
dnNormalize: <cn=Database 3,cn=Databases,cn=Monitor>
=> ldap_bv2dn(cn=Database 3,cn=Databases,cn=Monitor,0)
<= ldap_bv2dn(cn=Database 3,cn=Databases,cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=database 3,cn=databases,cn=monitor)=0
<<< dnNormalize: <cn=database 3,cn=databases,cn=monitor>
...
...
...
dnNormalize: <cn=Backend 3>
<<< dnNormalize: <cn=backend 3>
...
...
...
dnNormalize: <cn=Database 1,cn=Databases,cn=Monitor>
=> ldap_bv2dn(cn=Database 1,cn=Databases,cn=Monitor,0)
<= ldap_bv2dn(cn=Database 1,cn=Databases,cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=database 1,cn=databases,cn=monitor)=0
<<< dnNormalize: <cn=database 1,cn=databases,cn=monitor>
...
...
...
dnNormalize: <cn=Database 2,cn=Databases,cn=Monitor>
=> ldap_bv2dn(cn=Database 2,cn=Databases,cn=Monitor,0)
<= ldap_bv2dn(cn=Database 2,cn=Databases,cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=database 2,cn=databases,cn=monitor)=0
<<< dnNormalize: <cn=database 2,cn=databases,cn=monitor>
...
...
...
dnNormalize: <cn=Backend 4>
<<< dnNormalize: <cn=backend 4>
...
...
...
dnNormalize: <cn=Backend 5>
<<< dnNormalize: <cn=backend 5>
...
...
...
dnNormalize: <cn=Backend 6>
<<< dnNormalize: <cn=backend 6>
...
...
...
dnNormalize: <cn=Backend 7>
<<< dnNormalize: <cn=backend 7>
...
...
...
dnNormalize: <cn=Backend 8>
<<< dnNormalize: <cn=backend 8>
...
...
...
dnNormalize: <cn=Backend 9>
<<< dnNormalize: <cn=backend 9>
...
...
...
dnNormalize: <cn=Backend 10>
<<< dnNormalize: <cn=backend 10>
...
...
...
dnNormalize: <cn=Backend 11>
<<< dnNormalize: <cn=backend 11>
...
...
...
dnNormalize: <cn=Max File Descriptors>
<<< dnNormalize: <cn=max file descriptors>
...
...
...
dnNormalize: <cn=Total>
<<< dnNormalize: <cn=total>
...
...
...
dnNormalize: <cn=Current>
<<< dnNormalize: <cn=current>
...
...
...
dnNormalize: <cn=Frontend>
<<< dnNormalize: <cn=frontend>
...
...
...
dnNormalize: <cn=Database 0>
<<< dnNormalize: <cn=database 0>
...
...
...
dnNormalize: <cn=Backend 0,cn=Backends,cn=Monitor>
=> ldap_bv2dn(cn=Backend 0,cn=Backends,cn=Monitor,0)
<= ldap_bv2dn(cn=Backend 0,cn=Backends,cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=backend 0,cn=backends,cn=monitor)=0
<<< dnNormalize: <cn=backend 0,cn=backends,cn=monitor>
...
...
...
dnNormalize: <cn=Database 1>
<<< dnNormalize: <cn=database 1>
...
...
...
dnNormalize: <cn=Backend 3,cn=Backends,cn=Monitor>
=> ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor,0)
<= ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=backend 3,cn=backends,cn=monitor)=0
<<< dnNormalize: <cn=backend 3,cn=backends,cn=monitor>
...
...
...
dnNormalize: <cn=Database 2>
<<< dnNormalize: <cn=database 2>
...
...
...
dnNormalize: <cn=Backend 3,cn=Backends,cn=Monitor>
=> ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor,0)
<= ldap_bv2dn(cn=Backend 3,cn=Backends,cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=backend 3,cn=backends,cn=monitor)=0
<<< dnNormalize: <cn=backend 3,cn=backends,cn=monitor>
...
...
...
dnNormalize: <cn=Database 3>
<<< dnNormalize: <cn=database 3>
...
...
...
dnNormalize: <cn=Backend 2,cn=Backends,cn=Monitor>
=> ldap_bv2dn(cn=Backend 2,cn=Backends,cn=Monitor,0)
<= ldap_bv2dn(cn=Backend 2,cn=Backends,cn=Monitor)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=backend 2,cn=backends,cn=monitor)=0
<<< dnNormalize: <cn=backend 2,cn=backends,cn=monitor>
...
...
...
dnNormalize: <cn=Listener 0>
<<< dnNormalize: <cn=listener 0>
...
...
...
dnNormalize: <cn=Listener 1>
<<< dnNormalize: <cn=listener 1>
...
...
...
dnNormalize: <cn=Bind>
<<< dnNormalize: <cn=bind>
...
...
...
dnNormalize: <cn=Unbind>
<<< dnNormalize: <cn=unbind>
...
...
...
dnNormalize: <cn=Search>
<<< dnNormalize: <cn=search>
...
...
...
dnNormalize: <cn=Compare>
<<< dnNormalize: <cn=compare>
...
...
...
dnNormalize: <cn=Modify>
<<< dnNormalize: <cn=modify>
...
...
...
dnNormalize: <cn=Modrdn>
<<< dnNormalize: <cn=modrdn>
...
...
...
dnNormalize: <cn=Add>
<<< dnNormalize: <cn=add>
...
...
...
dnNormalize: <cn=Delete>
<<< dnNormalize: <cn=delete>
...
...
...
dnNormalize: <cn=Abandon>
<<< dnNormalize: <cn=abandon>
...
...
...
dnNormalize: <cn=Extended>
<<< dnNormalize: <cn=extended>
...
...
...
dnNormalize: <cn=Overlay 0>
<<< dnNormalize: <cn=overlay 0>
...
...
...
dnNormalize: <cn=Overlay 1>
<<< dnNormalize: <cn=overlay 1>
...
...
...
dnNormalize: <cn=Overlay 2>
<<< dnNormalize: <cn=overlay 2>
...
...
...
dnNormalize: <cn=Overlay 3>
<<< dnNormalize: <cn=overlay 3>
...
...
...
dnNormalize: <cn=Bytes>
<<< dnNormalize: <cn=bytes>
...
...
...
dnNormalize: <cn=PDU>
<<< dnNormalize: <cn=pdu>
...
...
...
dnNormalize: <cn=Entries>
<<< dnNormalize: <cn=entries>
...
...
...
dnNormalize: <cn=Referrals>
<<< dnNormalize: <cn=referrals>
...
...
...
dnNormalize: <cn=Max>
<<< dnNormalize: <cn=max>
...
...
...
dnNormalize: <cn=Max Pending>
<<< dnNormalize: <cn=max pending>
...
...
...
dnNormalize: <cn=Open>
<<< dnNormalize: <cn=open>
...
...
...
dnNormalize: <cn=Starting>
<<< dnNormalize: <cn=starting>
...
...
...
dnNormalize: <cn=Active>
<<< dnNormalize: <cn=active>
...
...
...
dnNormalize: <cn=Pending>
<<< dnNormalize: <cn=pending>
...
...
...
dnNormalize: <cn=Backload>
<<< dnNormalize: <cn=backload>
...
...
...
dnNormalize: <cn=State>
<<< dnNormalize: <cn=state>
...
...
...
dnNormalize: <cn=Runqueue>
<<< dnNormalize: <cn=runqueue>
...
...
...
dnNormalize: <cn=Tasklist>
<<< dnNormalize: <cn=tasklist>
...
...
...
dnNormalize: <cn=Start>
<<< dnNormalize: <cn=start>
...
...
...
dnNormalize: <cn=Current>
<<< dnNormalize: <cn=current>
...
...
...
dnNormalize: <cn=Uptime>
<<< dnNormalize: <cn=uptime>
...
...
...
dnNormalize: <cn=Read>
<<< dnNormalize: <cn=read>
...
...
...
dnNormalize: <cn=Write>
<<< dnNormalize: <cn=write>
slapd starting
daemon: added 4r listener=(nil)
daemon: added 7r listener=0x7fcb0f5bc2d0
daemon: added 8r listener=0x7fcb0f5bc390
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: activity on 1 descriptor
daemon: activity on:
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: activity on 1 descriptor
daemon: activity on:
slap_listener_activate(7):
daemon: epoll: listen=7 busy
daemon: epoll: listen=8 active_threads=0 tvp=zero
...
...
...
slap_listener(ldap:///)
daemon: activity on 1 descriptor
daemon: activity on:daemon: listen=7, new connection on 16
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: added 16r (active) listener=(nil)
conn=1000 fd=16 ACCEPT from IP=172.24.10.201:23867 (IP=0.0.0.0:389)
daemon: activity on 1 descriptor
daemon: activity on:
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: activity on 1 descriptor
daemon: activity on: 16r
daemon: read active on 16
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
connection_get(16)
connection_get(16): got connid=1000
connection_read(16): checking for input on id=1000
ber_get_next
ldap_read: want=8, got=8
  0000:  30 60 02 01 01 60 33 02                            0`...`3.
ldap_read: want=90, got=90
  0000:  01 03 04 19 75 69 64 3d  4e 75 50 6f 69 6e 74 2c
....uid=NuPoint,
  0010:  64 63 3d 68 74 63 2c 64  63 3d 63 6f 6d 80 13 64
dc=htc,dc=com..d
  0020:  65 63 20 31 33 20 32 30  31 32 20 63 72 65 61 74   ec 13 2012
creat
  0030:  65 64 a0 26 30 24 04 16  31 2e 32 2e 38 34 30 2e
ed.&0$..1.2.840.
  0040:  31 31 33 35 35 36 2e 31  2e 34 2e 33 31 39 01 01
113556.1.4.319..
  0050:  ff 04 07 30 05 02 01 0a  04 00                     ...0......
ber_get_next: tag 0x30 len 96 contents:
ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000920 end=0x7fcad8000980 len=96
  0000:  02 01 01 60 33 02 01 03  04 19 75 69 64 3d 4e 75
...`3.....uid=Nu
  0010:  50 6f 69 6e 74 2c 64 63  3d 68 74 63 2c 64 63 3d
Point,dc=htc,dc=
  0020:  63 6f 6d 80 13 64 65 63  20 31 33 20 32 30 31 32   com..dec 13
2012
  0030:  20 63 72 65 61 74 65 64  a0 26 30 24 04 16 31 2e
created.&0$..1.
  0040:  32 2e 38 34 30 2e 31 31  33 35 35 36 2e 31 2e 34
2.840.113556.1.4
  0050:  2e 33 31 39 01 01 ff 04  07 30 05 02 01 0a 04 00
.319.....0......
op tag 0x60, time 1355857467
ber_get_next
ldap_read: want=8 error=Resource temporarily unavailable
daemon: activity on 1 descriptor
daemon: activity on:
conn=1000 op=0 do_bind
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
ber_scanf fmt ({imt) ber:
ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000923 end=0x7fcad8000980 len=93
  0000:  60 33 02 01 03 04 19 75  69 64 3d 4e 75 50 6f 69
`3.....uid=NuPoi
  0010:  6e 74 2c 64 63 3d 68 74  63 2c 64 63 3d 63 6f 6d
nt,dc=htc,dc=com
  0020:  80 13 64 65 63 20 31 33  20 32 30 31 32 20 63 72   ..dec 13 2012
cr
  0030:  65 61 74 65 64 a0 26 30  24 04 16 31 2e 32 2e 38
eated.&0$..1.2.8
  0040:  34 30 2e 31 31 33 35 35  36 2e 31 2e 34 2e 33 31
40.113556.1.4.31
  0050:  39 01 01 ff 04 07 30 05  02 01 0a 04 00            9.....0......
ber_scanf fmt (m}) ber:
ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000943 end=0x7fcad8000980 len=61
  0000:  00 13 64 65 63 20 31 33  20 32 30 31 32 20 63 72   ..dec 13 2012
cr
  0010:  65 61 74 65 64 a0 26 30  24 04 16 31 2e 32 2e 38
eated.&0$..1.2.8
  0020:  34 30 2e 31 31 33 35 35  36 2e 31 2e 34 2e 33 31
40.113556.1.4.31
  0030:  39 01 01 ff 04 07 30 05  02 01 0a 04 00            9.....0......
=> get_ctrls
ber_scanf fmt ({m) ber:
ber_dump: buf=0x7fcad8000920 ptr=0x7fcad800095a end=0x7fcad8000980 len=38
  0000:  30 24 04 16 31 2e 32 2e  38 34 30 2e 31 31 33 35
0$..1.2.840.1135
  0010:  35 36 2e 31 2e 34 2e 33  31 39 01 01 ff 04 07 30
56.1.4.319.....0
  0020:  05 02 01 0a 04 00                                  ......
ber_scanf fmt (b) ber:
ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000974 end=0x7fcad8000980 len=12
  0000:  00 01 ff 04 07 30 05 02  01 0a 04 00               .....0......
ber_scanf fmt (m) ber:
ber_dump: buf=0x7fcad8000920 ptr=0x7fcad8000977 end=0x7fcad8000980 len=9
  0000:  04 07 30 05 02 01 0a 04  00                        ..0......
=> get_ctrls: oid="1.2.840.113556.1.4.319" (critical)
<= get_ctrls: n=1 rc=12 err="critical extension is unavailable"
send_ldap_result: conn=1000 op=0 p=3
send_ldap_result: err=12 matched="" text="critical extension is
unavailable"
send_ldap_response: msgid=1 tag=97 err=12
ber_flush2: 47 bytes to sd 16
  0000:  30 2d 02 01 01 61 28 0a  01 0c 04 00 04 21 63 72
0-...a(......!cr
  0010:  69 74 69 63 61 6c 20 65  78 74 65 6e 73 69 6f 6e   itical
extension
  0020:  20 69 73 20 75 6e 61 76  61 69 6c 61 62 6c 65       is
unavailable
ldap_write: want=47, written=47
  0000:  30 2d 02 01 01 61 28 0a  01 0c 04 00 04 21 63 72
0-...a(......!cr
  0010:  69 74 69 63 61 6c 20 65  78 74 65 6e 73 69 6f 6e   itical
extension
  0020:  20 69 73 20 75 6e 61 76  61 69 6c 61 62 6c 65       is
unavailable
conn=1000 op=0 RESULT tag=97 err=12 text=critical extension is unavailable
conn=1000 op=0 do_bind: get_ctrls failed
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: activity on 1 descriptor
daemon: activity on: 16r
daemon: read active on 16
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
connection_get(16)
connection_get(16): got connid=1000
connection_read(16): checking for input on id=1000
ber_get_next
ldap_read: want=8, got=0
ber_get_next on fd 16 failed errno=0 (Success)
connection_read(16): input error=-2 id=1000, closing.
connection_closing: readying conn=1000 sd=16 for close
connection_close: conn=1000 sd=16
daemon: activity on 1 descriptor
daemon: activity on:
daemon: removing 16
conn=1000 fd=16 closed (connection lost)
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
^Cdaemon: shutdown requested and initiated.
daemon: closing 7
daemon: closing 8
slapd shutdown: waiting for 0 operations/tasks to finish
slapd shutdown: initiated
====> bdb_cache_release_all
====> bdb_cache_release_all
slapd destroy: freeing system resources.
slapd stopped.
[root@radius1 openldap]# exit
exit
Script done on Tue 18 Dec 2012 03:06:10 PM EST

HTC Disclaimer:  The information contained in this message may be
privileged and confidential and protected from disclosure. If the reader
of this message is not the intended recipient, or an employee or agent
responsible for delivering this message to the intended recipient, you are
hereby notified that any dissemination, distribution or copying of this
communication is strictly prohibited.  If you have received this
communication in error, please notify us immediately by replying to the
message and deleting it from your computer.  Thank you.

-- 
Pierangelo Masarati
Associate Professor
Dipartimento di Ingegneria Aerospaziale
Politecnico di Milano

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

Re: Bind failing with "critical extension is unavailable" error when used with pagedresultscontrol