-
Bug
-
Resolution: Done-Errata
-
Major
-
None
-
389-ds-base-2.5.2-1.el9
-
None
-
None
-
ZStream
-
sst_idm_ds
-
25
-
0
-
QE ack, Dev ack
-
False
-
-
Yes
-
None
-
Approved Blocker
-
Pass
-
Automated
-
Bug Fix
-
-
Done
-
None
Description of problem:
subsuffix are not returned in one level scoped search
Steps to reproduce the behavior:
- Create an instance with dc=example,dc=com suffix (with entries in the backends)
- Create a subsuffix just below the suffix with entries:
- dsconf instance backend create --suffix ou=foo,dc=example,dc=com --create-entries --be-name foo
- Run ldapsearch ldapsearch with sub scope:
ldapsearch -Q -LLL -Y EXTERNAL -H ldapi://%2fvar%2frun%2fslapd-i1.socket -s sub -b dc=example,dc=com '(ou=*)' dn
(No errors: ou=foo,dc=example,dc=com is listed)
- Run ldapsearch with one scope:
ldapsearch -Q -LLL -Y EXTERNAL -H ldapi://%2fvar%2frun%2fslapd-i1.socket -s one -b dc=example,dc=com '(ou=*)' dn
(Error: ou=foo,dc=example,dc=com is not listed)
Expected results
ou=foo,dc=example,dc=com should be listed in both cases
Additional context
This behavior confuses some ldap browsers that cannot show any more the entries below sub suffix.
Upstream ticket:
- blocks
-
DIRSRV-110 subsuffix are not returned in one level scoped search
- Closed
- clones
-
DIRSRV-56 subsuffix are not returned in one level scoped search
- Closed
- is duplicated by
-
DIRSRV-56 subsuffix are not returned in one level scoped search
- Closed
- external trackers
- links to
-
RHSA-2024:132195 389-ds-base bug fix and enhancement update