OK, some sanity checks: ensure the parent entry exists and has expected contents: ldapsearch -D cn=admin,dc=drbhome,dc=ca -W -s base -b 'dc=drbhome,dc=ca'
'*' +
("'*' +" is asking for all attributes including operational ones; then the
output will be closer to what you see from slapcat)
Result: 34 Invalid DN syntax Text: invalid DN
ensure the samba domain entry exists and has expected contents: ldapsearch -D cn=admin,dc=drbhome,dc=ca -W -s base -b
'sambaDomainName=DRBHOME,dc=drbhome,dc=ca' '*' +
Same result.
try each part of the filter separately: ldapsearch -D cn=admin,dc=drbhome,dc=ca -W -s sub -b 'dc=drbhome,dc=ca'
'(objectClass=sambaDomain)'
Result: 32 No such object
ldapsearch -D cn=admin,dc=drbhome,dc=ca -W -s sub -b 'dc=drbhome,dc=ca'
'(sambaDomainName=DRBHOME)'
Result: 32 No such object
All of which is reminding me of something I was thinking of earlier: is it somehow possible that slapcat is able to read the entries (which it does), but ldapsearch is not because it's reading something OTHER THAN the same database slapcat is querying?