To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p 9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
LDAP_SORT_CONTROL_MISSING - 60 (x'3C) - Unused in standards. Sun LDAP Directory Server only. Server did not receive a required server-side sorting control.
Can someone that has experience with this type of LDAP search criteria assist me to obtain a final resolution?
Thanks to everyone, and regards, Auteria Winzer Jr.
--On Tuesday, February 18, 2014 10:11 AM -0800 "Auteria W. Winzer Jr." wwinzer@yahoo.com wrote:
To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p 9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
If you are searching against an OpenLDAP installation, you need to add the sssvlv overlay if you want to use that control.
--Quanah
--
Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration
Quanah,
I should've been more detailed. The search isn't against an OpenLDAP instance. It's against Oracle/Sun Directory Server 5.2 Patch_6.
Best Regards, Auteria Winzer Jr.
From: Quanah Gibson-Mount quanah@zimbra.com To: Auteria W. Winzer Jr. wwinzer@yahoo.com; openldap-technical@openldap.org Sent: Tuesday, February 18, 2014 12:40 PM Subject: Re: ldapsearch error - Unknown error (60)
--On Tuesday, February 18, 2014 10:11 AM -0800 "Auteria W. Winzer Jr." wwinzer@yahoo.com wrote:
To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p 9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
If you are searching against an OpenLDAP installation, you need to add the sssvlv overlay if you want to use that control.
--Quanah
--
Quanah Gibson-Mount Architect - Server Zimbra, Inc.
Zimbra :: the leader in open source messaging and collaboration
--On Tuesday, February 18, 2014 11:07 AM -0800 "Auteria W. Winzer Jr." wwinzer@yahoo.com wrote:
Quanah,
I should've been more detailed. The search isn't against an OpenLDAP instance. It's against Oracle/Sun Directory Server 5.2 Patch_6.
Then they are not advertising that the control exists, so I suggest you talk to whomever runs your directory server, or stop requesting that control.
--Quanah
--
Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration
Quanah,
The supported control does exists:
supportedcontrol: 2.16.840.1.113730.3.4.9 (VLV Request)
Regards, Auteria Winzer Jr.
From: Quanah Gibson-Mount quanah@zimbra.com To: Auteria W. Winzer Jr. wwinzer@yahoo.com; openldap-technical@openldap.org Sent: Tuesday, February 18, 2014 1:09 PM Subject: Re: ldapsearch error - Unknown error (60)
--On Tuesday, February 18, 2014 11:07 AM -0800 "Auteria W. Winzer Jr." wwinzer@yahoo.com wrote:
Quanah,
I should've been more detailed. The search isn't against an OpenLDAP instance. It's against Oracle/Sun Directory Server 5.2 Patch_6.
Then they are not advertising that the control exists, so I suggest you talk to whomever runs your directory server, or stop requesting that control.
--Quanah
--
Quanah Gibson-Mount Architect - Server Zimbra, Inc.
Zimbra :: the leader in open source messaging and collaboration
On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p 9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
LDAP_SORT_CONTROL_MISSING - 60 (x'3C) - Unused in standards. Sun LDAP Directory Server only. Server did not receive a required server-side sorting control.
Can someone that has experience with this type of LDAP search criteria assist me to obtain a final resolution?
See the relevant I-D http://tools.ietf.org/html/draft-ietf-ldapext-ldapv3-vlv-09
per section 6.1, you need to have a SSS control in addition to the VLV control. You're missing that, hence the server says it didn't receive the requirement. Make sure your requests comply with the I-D.
Also, the controlValue has precise requirements, and I don't see an example of that above.
Using OpenLDAP's ldapsearch(1) I believe this would go something like:
ldapsearch -z none -x -E sss=heightInCm -E vlv=0/1/0/1 -b cn=foo -h ldap.example.com (uid=user)
another example from the archives:
http://www.openldap.org/lists/openldap-technical/201005/msg00087.html
Aaron,
If the sort attribute is "displayname" which is how it's configured within Oracle/Sun Directory Server VLV Browsing Index (dn=display_browsing_index) the vlvFilter that's defined is "(&(objectClass=groupOfUniqueNames)(displayname=*))".
With in your example below, can you explain in detail "-E sss=heightInCm -E vlv=0/1/0/1"? What's an example for "heightInCm", and what does "0/1/0/1" represent?
With Best Regards, Auteria Winzer Jr.
From: Aaron Richton richton@nbcs.rutgers.edu To: Auteria W. Winzer Jr. wwinzer@yahoo.com Cc: "openldap-technical@openldap.org" openldap-technical@openldap.org Sent: Tuesday, February 18, 2014 1:05 PM Subject: Re: ldapsearch error - Unknown error (60)
On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p 9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
LDAP_SORT_CONTROL_MISSING - 60 (x'3C) - Unused in standards. Sun LDAP Directory Server only. Server did not receive a required server-side sorting control.
Can someone that has experience with this type of LDAP search criteria assist me to obtain a final resolution?
See the relevant I-D http://tools.ietf.org/html/draft-ietf-ldapext-ldapv3-vlv-09
per section 6.1, you need to have a SSS control in addition to the VLV control. You're missing that, hence the server says it didn't receive the requirement. Make sure your requests comply with the I-D.
Also, the controlValue has precise requirements, and I don't see an example of that above.
Using OpenLDAP's ldapsearch(1) I believe this would go something like:
ldapsearch -z none -x -E sss=heightInCm -E vlv=0/1/0/1 -b cn=foo -h ldap.example.com (uid=user)
another example from the archives:
http://www.openldap.org/lists/openldap-technical/201005/msg00087.html
On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
Aaron,
If the sort attribute is "displayname" which is how it's configured within Oracle/Sun Directory Server VLV Browsing Index (dn=display_browsing_index) the vlvFilter that's defined is "(&(objectClass=groupOfUniqueNames)(displayname=*))".
With in your example below, can you explain in detail "-E sss=heightInCm -E vlv=0/1/0/1"? What's an example for "heightInCm", and what does "0/1/0/1" represent?
In OpenLDAP ldapsearch(1) -E takes the form extension=parameter.
So for the SSS extension, see RFC2891, where section 1.1 shows the controlValue must include at least one attributeType (and optionally more parameters too, which I elected not to put in my example). So "heightInCm" is my example, feel free to substitute the attributeType/orderingRule/reverseOrder you actually desire for your application. (Particularly important since I made "heightInCm" up and I don't believe that's been registered anywhere...)
And for vlv, see the I-D I linked to, 0/1/0/1 is my example that gets automagically encoded properly by ldapsearch(1) to refer to the controlValue defined in Section 6.1. Again you should feel free to substitute the parameters you actually desire for your application.
With Best Regards, Auteria Winzer Jr.
From: Aaron Richton <richton@nbcs.rutgers.edu> To: Auteria W. Winzer Jr. <wwinzer@yahoo.com> Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org> Sent: Tuesday, February 18, 2014 1:05 PM Subject: Re: ldapsearch error - Unknown error (60)On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p 9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
LDAP_SORT_CONTROL_MISSING - 60 (x'3C) - Unused in standards. Sun LDAP Directory Server only. Server did not receive a required server-side sorting control.
Can someone that has experience with this type of LDAP search criteria assist me to obtain a final resolution?
See the relevant I-D http://tools.ietf.org/html/draft-ietf-ldapext-ldapv3-vlv-09
per section 6.1, you need to have a SSS control in addition to the VLV control. You're missing that, hence the server says it didn't receive the requirement. Make sure your requests comply with the I-D.
Also, the controlValue has precise requirements, and I don't see an example of that above.
Using OpenLDAP's ldapsearch(1) I believe this would go something like:
ldapsearch -z none -x -E sss=heightInCm -E vlv=0/1/0/1 -b cn=foo -h ldap.example.com (uid=user)
another example from the archives:
http://www.openldap.org/lists/openldap-technical/201005/msg00087.html
Will I need the -e "2.16.840.1.113730.3.4.9" since in the example below the attribute type I want to use is "-E sss=displayname", or will I still need the "-e" option to correspond with the "-E" options?
Best Regards,Auteria Winzer Jr.
From: Aaron Richton richton@nbcs.rutgers.edu To: Auteria W. Winzer Jr. wwinzer@yahoo.com Cc: "openldap-technical@openldap.org" openldap-technical@openldap.org Sent: Tuesday, February 18, 2014 1:35 PM Subject: Re: ldapsearch error - Unknown error (60)
On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
Aaron,
If the sort attribute is "displayname" which is how it's configured within Oracle/Sun Directory Server VLV Browsing Index (dn=display_browsing_index) the vlvFilter that's defined is "(&(objectClass=groupOfUniqueNames)(displayname=*))".
With in your example below, can you explain in detail "-E sss=heightInCm -E vlv=0/1/0/1"? What's an example for "heightInCm", and what does "0/1/0/1" represent?
In OpenLDAP ldapsearch(1) -E takes the form extension=parameter.
So for the SSS extension, see RFC2891, where section 1.1 shows the controlValue must include at least one attributeType (and optionally more parameters too, which I elected not to put in my example). So "heightInCm" is my example, feel free to substitute the attributeType/orderingRule/reverseOrder you actually desire for your application. (Particularly important since I made "heightInCm" up and I don't believe that's been registered anywhere...)
And for vlv, see the I-D I linked to, 0/1/0/1 is my example that gets automagically encoded properly by ldapsearch(1) to refer to the controlValue defined in Section 6.1. Again you should feel free to substitute the parameters you actually desire for your application.
With Best Regards, Auteria Winzer Jr.
From: Aaron Richton richton@nbcs.rutgers.edu To: Auteria W. Winzer Jr. wwinzer@yahoo.com Cc: "openldap-technical@openldap.org" openldap-technical@openldap.org Sent: Tuesday, February 18, 2014 1:05 PM Subject: Re: ldapsearch error - Unknown error (60)
On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p 9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
LDAP_SORT_CONTROL_MISSING - 60 (x'3C) - Unused in standards. Sun LDAP Directory Server only. Server did not receive a required server-side sorting control.
Can someone that has experience with this type of LDAP search criteria assist me to obtain a final resolution?
See the relevant I-D http://tools.ietf.org/html/draft-ietf-ldapext-ldapv3-vlv-09
per section 6.1, you need to have a SSS control in addition to the VLV control. You're missing that, hence the server says it didn't receive the requirement. Make sure your requests comply with the I-D.
Also, the controlValue has precise requirements, and I don't see an example of that above.
Using OpenLDAP's ldapsearch(1) I believe this would go something like:
ldapsearch -z none -x -E sss=heightInCm -E vlv=0/1/0/1 -b cn=foo -h ldap.example.com (uid=user)
another example from the archives:
http://www.openldap.org/lists/openldap-technical/201005/msg00087.html
On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
Will I need the -e "2.16.840.1.113730.3.4.9" since in the example below the attribute type I want to use is "-E sss=displayname", or will I still need the "-e" option to correspond with the "-E" options?
The ldapsearch(1) man page describes the difference between "-e" and "-E" as well as a listing of the supported extensions for each option. Choose your extensions (and their parameters) and use the appropriate "-e" or "-E" in accordance with the manual.
http://www.openldap.org/software/man.cgi?query=ldapsearch&apropos=0&...
There's no need to shoehorn in VLV controls with a non-standard and incorrect syntax, when you have available a documented syntax that I've pointed you to two different examples of.
Best Regards, Auteria Winzer Jr.
From: Aaron Richton <richton@nbcs.rutgers.edu> To: Auteria W. Winzer Jr. <wwinzer@yahoo.com> Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org> Sent: Tuesday, February 18, 2014 1:35 PM Subject: Re: ldapsearch error - Unknown error (60)On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
Aaron,
If the sort attribute is "displayname" which is how it's configured within Oracle/Sun Directory Server VLV Browsing Index (dn=display_browsing_index) the vlvFilter that's defined is "(&(objectClass=groupOfUniqueNames)(displayname=*))".
With in your example below, can you explain in detail "-E sss=heightInCm -E vlv=0/1/0/1"? What's an example for "heightInCm", and what does "0/1/0/1" represent?
In OpenLDAP ldapsearch(1) -E takes the form extension=parameter.
So for the SSS extension, see RFC2891, where section 1.1 shows the controlValue must include at least one attributeType (and optionally more parameters too, which I elected not to put in my example). So "heightInCm" is my example, feel free to substitute the attributeType/orderingRule/reverseOrder you actually desire for your application. (Particularly important since I made "heightInCm" up and I don't believe that's been registered anywhere...)
And for vlv, see the I-D I linked to, 0/1/0/1 is my example that gets automagically encoded properly by ldapsearch(1) to refer to the controlValue defined in Section 6.1. Again you should feel free to substitute the parameters you actually desire for your application.
With Best Regards, Auteria Winzer Jr.
_
From: Aaron Richton richton@nbcs.rutgers.edu To: Auteria W. Winzer Jr. wwinzer@yahoo.com Cc: "openldap-technical@openldap.org" openldap-technical@openldap.org Sent: Tuesday, February 18, 2014 1:05 PM Subject: Re: ldapsearch error - Unknown error (60)
On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p 9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
LDAP_SORT_CONTROL_MISSING - 60 (x'3C) - Unused in standards. Sun LDAP Directory Server only. Server did not receive a required server-side sorting control.
Can someone that has experience with this type of LDAP search criteria assist me to obtain a final resolution?
See the relevant I-D http://tools.ietf.org/html/draft-ietf-ldapext-ldapv3-vlv-09
per section 6.1, you need to have a SSS control in addition to the VLV control. You're missing that, hence the server says it didn't receive the requirement. Make sure your requests comply with the I-D.
Also, the controlValue has precise requirements, and I don't see an example of that above.
Using OpenLDAP's ldapsearch(1) I believe this would go something like:
ldapsearch -z none -x -E sss=heightInCm -E vlv=0/1/0/1 -b cn=foo -h ldap.example.com (uid=user)
another example from the archives:
http://www.openldap.org/lists/openldap-technical/201005/msg00087.html
Aaron,
The URL http://tools.ietf.org/html/draft-ietf-ldapext-ldapv3-vlv-09 can't be found, yet I was able to access the 2nd link from the openldap archives with no issues.
Regards, Auteria Winzer Jr.
From: Aaron Richton richton@nbcs.rutgers.edu To: Auteria W. Winzer Jr. wwinzer@yahoo.com Cc: "openldap-technical@openldap.org" openldap-technical@openldap.org Sent: Tuesday, February 18, 2014 1:05 PM Subject: Re: ldapsearch error - Unknown error (60)
On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p 9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
LDAP_SORT_CONTROL_MISSING - 60 (x'3C) - Unused in standards. Sun LDAP Directory Server only. Server did not receive a required server-side sorting control.
Can someone that has experience with this type of LDAP search criteria assist me to obtain a final resolution?
See the relevant I-D http://tools.ietf.org/html/draft-ietf-ldapext-ldapv3-vlv-09
per section 6.1, you need to have a SSS control in addition to the VLV control. You're missing that, hence the server says it didn't receive the requirement. Make sure your requests comply with the I-D.
Also, the controlValue has precise requirements, and I don't see an example of that above.
Using OpenLDAP's ldapsearch(1) I believe this would go something like:
ldapsearch -z none -x -E sss=heightInCm -E vlv=0/1/0/1 -b cn=foo -h ldap.example.com (uid=user)
another example from the archives:
http://www.openldap.org/lists/openldap-technical/201005/msg00087.html
"Auteria W. Winzer Jr." wwinzer@yahoo.com schrieb am 18.02.2014 um 21:00 in
Nachricht 1392753658.57245.YahooMailNeo@web181601.mail.ne1.yahoo.com:
Aaron,
The URL http://tools.ietf.org/html/draft-ietf-ldapext-ldapv3-vlv-09 can't be found, yet I was able to access the 2nd link from the openldap archives with no issues.
Some distributions pack the file: # rpm -ql openldap2 |grep vlv /usr/share/doc/packages/openldap2/drafts/draft-ietf-ldapext-ldapv3-vlv-xx.txt /usr/share/man/man5/slapo-sssvlv.5.gz
Regards, Auteria Winzer Jr.
From: Aaron Richton richton@nbcs.rutgers.edu To: Auteria W. Winzer Jr. wwinzer@yahoo.com Cc: "openldap-technical@openldap.org" openldap-technical@openldap.org Sent: Tuesday, February 18, 2014 1:05 PM Subject: Re: ldapsearch error - Unknown error (60)
On Tue, 18 Feb 2014, Auteria W. Winzer Jr. wrote:
To the members of the mailing list,
Upon a test search I'm getting the following error:
$ ldapsearch -LLL -v -z none -x -e "2.16.840.1.113730.3.4.9" -h bugsbunny.bar -p
9999 -b "ou=foo,o=bar" -D "uid=xxx,ou=foo,o=bar" -w "xxxxxxxx" "(&(objectClass=groupOfUniqueNames)(displayname=*))" displayname
ldap_initialize( ldap://bugsbunny.bar:9999 ) filter: (&(objectClass=groupOfUniqueNames)(displayname=*)) requesting: displayname Unknown error (60) Additional information: VLV Control
When looking up the error I noticed the following:
LDAP_SORT_CONTROL_MISSING - 60 (x'3C) - Unused in standards. Sun LDAP
Directory Server only. Server did not receive a required server-side sorting control.
Can someone that has experience with this type of LDAP search criteria
assist me to obtain a final resolution?
See the relevant I-D http://tools.ietf.org/html/draft-ietf-ldapext-ldapv3-vlv-09
per section 6.1, you need to have a SSS control in addition to the VLV
control. You're missing that, hence the server says it didn't receive the requirement. Make sure your requests comply with the I-D.
Also, the controlValue has precise requirements, and I don't see an example
of that above.
Using OpenLDAP's ldapsearch(1) I believe this would go something like:
ldapsearch -z none -x -E sss=heightInCm -E vlv=0/1/0/1 -b cn=foo -h
ldap.example.com (uid=user)
another example from the archives:
http://www.openldap.org/lists/openldap-technical/201005/msg00087.html
openldap-technical@openldap.org
-
Aaron Richton -
Auteria W. Winzer Jr. -
Quanah Gibson-Mount -
Ulrich Windl