[ILUG] ldap search fails
[ILUG] ldap search fails
Bernhard D Rohrer
graylion at sm-wg.net
Fri Apr 13 11:36:21 IST 2007
Hi Folks
I am using ldap to find the delivery mailboxes for postfix, but this
fails at the moment:
I am trying to find the mailbox name for which I am using the uid from
the email address which is stored in mail.
postfix config reads like this:
server_host = 127.0.0.1
server_port = 389
search_base = ou=users,dc=domain,dc=net
scope = sub
timeout = 30
bind = yes
bind_dn = cn=postfix,ou=system,ou=users,dc=domain,dc=net
bind_pw = xxxxxxxxxxxxxx
version = 3
start_tls = no
query_filter = mail=%s
result_attribute = uid
syslog tells me this:
Apr 13 02:59:39 collab slapd[19224]: conn=1 op=1 SRCH
base="ou=users,dc=domain,dc=net" scope=2 deref=0
filter="(|(mail=user at domain.net )(mozillaSecondEmail=user at domain.net ))"
Apr 13 02:59:39 collab slapd[19224]: conn=1 op=1 SRCH
attr=mailForwardingAddress
Apr 13 02:59:39 collab slapd[19224]: ==> limits_get: conn=1 op=1
dn="cn=postfix,ou=system,ou=users,dc=domain,dc=net"
Apr 13 02:59:39 collab slapd[19224]: => bdb_search
Apr 13 02:59:39 collab slapd[19224]:
bdb_dn2entry("ou=users,dc=domain,dc=net")
Apr 13 02:59:39 collab slapd[19224]: search_candidates:
base="ou=users,dc=domain,dc=net" (0x00000006) scope=2
Apr 13 02:59:39 collab slapd[19224]: => bdb_dn2idl(
"ou=users,dc=domain,dc=net" )
Apr 13 02:59:39 collab slapd[19224]: <= bdb_dn2idl: id=11 first=6 last=57
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IAND
Apr 13 02:59:39 collab slapd[19224]: => bdb_list_candidates 0xa0
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IOR
Apr 13 02:59:39 collab slapd[19224]: => bdb_list_candidates 0xa1
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IEQUALITY
Apr 13 02:59:39 collab slapd[19224]: => bdb_equality_candidates
(objectClass)
Apr 13 02:59:39 collab slapd[19224]: => key_read
Apr 13 02:59:39 collab slapd[19224]: <= bdb_index_read: failed (-30990)
Apr 13 02:59:39 collab slapd[19224]: <= bdb_equality_candidates: id=0,
first=0, last=0
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=0
first=0 last=0
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IOR
Apr 13 02:59:39 collab slapd[19224]: => bdb_list_candidates 0xa1
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IEQUALITY
Apr 13 02:59:39 collab slapd[19224]: => bdb_equality_candidates (mail)
Apr 13 02:59:39 collab slapd[19224]: => key_read
Apr 13 02:59:39 collab slapd[19224]: <= bdb_index_read 1 candidates
Apr 13 02:59:39 collab slapd[19224]: <= bdb_equality_candidates: id=1,
first=13, last=13
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=1
first=13 last=13
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IEQUALITY
Apr 13 02:59:39 collab slapd[19224]: => bdb_equality_candidates
(mozillaSecondEmail)
Apr 13 02:59:39 collab slapd[19224]: <= bdb_equality_candidates:
(mozillaSecondEmail) index_param failed (18)
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_list_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_list_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_list_candidates: id=11
first=6 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=11
first=6 last=57
Apr 13 02:59:39 collab slapd[19224]: bdb_search_candidates: id=11
first=6 last=57
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 6 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 6
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 6
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 6
Apr 13 02:59:39 collab slapd[19224]: => send_search_entry:
dn="uid=user,ou=users,dc=domain,dc=net"
Apr 13 02:59:39 collab slapd[19224]: conn=1 op=1 ENTRY
dn="uid=user,ou=users,dc=domain,dc=net"
Apr 13 02:59:39 collab slapd[19224]: <= send_search_entry
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 17 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 18 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 19 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 20 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 21 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 24 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 35 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 36 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 57 does not match filter
Apr 13 02:59:39 collab slapd[19224]: send_ldap_result: conn=1 op=1 p=3
Apr 13 02:59:39 collab slapd[19224]: send_ldap_response: msgid=2 tag=101
err=0
Apr 13 02:59:39 collab slapd[19224]: conn=1 op=1 SEARCH RESULT tag=101
err=0 nentries=1 text=
Apr 13 02:59:39 collab slapd[19224]: connection_get(15): got connid=1
Apr 13 02:59:39 collab slapd[19224]: connection_read(15): checking for
input on id=1
Apr 13 02:59:39 collab slapd[19224]: ber_get_next on fd 15 failed
errno=11 (Resource temporarily unavailable)
I have indexed the following fields in slapd.conf:
# Indexing options for database #1
index objectClass eq
index mail pres,eq,sub
index uid pres,eq,sub
index cn,sn pres,eq,sub
the ldif for the user it is trying to find is (suitably edited):
dn: uid=user,ou=users,dc=domain,dc=net
c: IE
gidNumber: 10
mail: user at domain.net
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: mozillaAbPersonAlpha
uid: user
uidNumber: 15
userPassword: xxxxxxxxxxxxxxxxxxxxxxxxxx
to add insult to injury a manual
ldapsearch -x -D cn=admin,dc=domain,dc=net -w xxxxxxx -H
ldap://localhost mail=user at domain.net
returns the correct record
cheers
Bernhard
--
Graylion's Fetish & Fashion Store
Goth and Kinky Boots, Clothing and Jewellery
http://www.graylion.net
More information about the ILUG
mailing list Read this without the formatting . 
