Hi Ondřej
The last weeks have been hectic…
I will proceed on a tcpdump + minimal setup in the next weeks.
Sebastian
Sebastian Perkins Senior Systems Development Engineer weareplanet.com De : Ondřej Kuzník ondra@mistotebe.net Date : mardi, 7 avril 2026 à 16:40 À : Sebastian Perkins Sebastian.Perkins@hoistgroup.com Cc : openldap-technical@openldap.org openldap-technical@openldap.org Objet : Re: Ldapsearch : double on certain extended attributes
CAUTION: This email originated from outside Planet. Do not click links or open attachments unless you recognise the sender and know the content is safe. Please report all suspicious emails by clicking on the report message button in Outlook.
On Thu, Apr 02, 2026 at 06:39:48AM +0000, Sebastian Perkins wrote:
Hello Ondřej
If you only load the modules you use (removing the rwm, meta, … modules below) does it still happen?
We literally stripped down the config to be bare minimum, and still happened.
We even just added a base DN entry and also failed…
The current solution is to grep -v the 2 entries in ldif for ldapsearch (slapcat to slapadd is fine)
FYI the ldapsearch dump is used for a very specific part of the tree containing users, allowing quick restore of users (crash, envrionment sync etc), the slapcat is more brutal 😃
Would the « Issue » be in the ldapsearch result ? As slapcat is fine… however an ldapsearch bug issue on deb11 and 13 in openldap 2.4 and 2.6 is probably not one.
Hello Sebastian, I don't think the issue is in ldapsearch (but that's easy to test, just look at data in wireshark or `ldapsearch -d-1` or same in slapd logs to see what was sent).
If it really happens all the time with the config you last provided, even after making the changes that I suggested (not loading the extra modules), then please prepare a small self-contained set up that we can use to reproduce the issue. Given that I've been unable to do so based on what's been provided so far, there must be a detail that's missing that makes all the difference and honestly I'm not sure where else to look.
Regards,
-- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com/http://www.symas.com/ Packaged, certified, and supported LDAP solutions powered by OpenLDAP
