Hello,
I am trying to migrate from
directory.emich.edu : redhat ES 7 : redhat supplied ldap
[root@directory.emich.edu:/etc/openldap]# /usr/sbin/slapd -V
@(#) $OpenLDAP: slapd 2.4.44 (Jun 6 2020 17:06:42) $
mockbuild@x86-vm-25.build.eng.bos.redhat.com: /builddir/build/BUILD/openldap-2.4.44/openldap-2.4.44/servers/slapd
to
directory8.emich.edu : redhat ES 8 : hand rolled from source code ldap
[root@directory8.emich.edu:/root]# /usr/local/libexec/slapd -V
@(#) $OpenLDAP: slapd 2.6.X (Nov 15 2022 16:59:29) $
root@directory8.emich.edu: /home/src/openldap-OPENLDAP_REL_ENG_2_6/servers/slapd
And everything seems to work except for one thing.
I can't seem to do global anonymous searches?
I don't understand ldap well enough to figure out what step or config
I've missed.
[root@directory8.emich.edu:/tmp]# ldapsearch -H "ldap://directory.emich.edu" -LLL -b "uid=mgoebel,ou=people,o=emich.edu" -x -s sub "(objectClass=*)"
dn: uid=mgoebel,ou=people,o=emich.edu
objectClass: top
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
uid: mgoebel
[root@directory8.emich.edu:/tmp]# ldapsearch -H "ldap://directory8.emich.edu" -LLL -b "uid=mgoebel,ou=people,o=emich.edu" -x -s sub "(objectClass=*)"
dn: uid=mgoebel,ou=people,o=emich.edu
objectClass: top
objectClass: person
objectClass: inetOrgPerson
objectClass: organizationalPerson
uid: mgoebel
[root@directory8.emich.edu:/tmp]# ldapsearch -H "ldap://directory.emich.edu" -LLL -b "ou=people,o=emich.edu" -x -s sub "(objectClass=*)"
returns every record with objectClass set
[root@directory8.emich.edu:/tmp]# ldapsearch -H "ldap://directory8.emich.edu" -LLL -b "ou=people,o=emich.edu" -x -s sub "(objectClass=*)"
No such object (32)
compile options used for openldap were
./configure \
--prefix=/usr/local \
--disable-ipv6 \
--with-kerberos \
--enable-monitor \
--enable-dynamic \
--enable-phonetic \
--enable-slapd \
--enable-spasswd \
--enable-rlookups \
--enable-hdb \
--enable-dyngroup=yes \
--enable-proxycache=yes \
--enable-bdb \
--enable-crypt \
--with-cyrus-sasl=yes \
--with-tls
Thanks,
Matt