Bah, nevermind. Of course I had to post to the list before the lightbulb went off. I just had to add a read permission for 'entry'.

-Ron-

2011-06-08_16:08:33-0400 Ron Peterson rpeterso@mtholyoke.edu:

Hi,

I'm having trouble retrieving the DN, and only the DN, when using the 'ldap' back end to proxy my master directory database.

2656$ ldapsearch -LLL -x -w apass -D "uid=test,ou=admin" -b "ou=test" '(uid=auser)' dn: yDirectoryID=442E65DA-678E-BEB5-3378-56331AEE1AA0,ou=test eduPersonPrimaryAffiliation: staff sn: Peterson ...

2657$ ldapsearch -LLL -x -w apass -D "uid=test,ou=admin" -b "ou=test" '(uid=auser)' 1.1

Why would I not see the DN when asking for just 1.1?

TIA

-- Ron Peterson Network & Systems Administrator Mount Holyoke College http://www.mtholyoke.edu/~rpeterso