More verbose:
# extended LDIF
#
# LDAPv3
# base <ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro> with scope oneLevel
# filter: ou=Profesori
# requesting: dn
#
# Profesori, DPPD, People, curs.pub.ro
dn: ou=Profesori,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
# Asistenti-Man, DPPD, People, curs.pub.ro
dn: ou=Asistenti-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
# Profesori-Man, DPPD, People, curs.pub.ro
dn: ou=Profesori-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
# Externi, DPPD, People, curs.pub.ro
dn: ou=Externi,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
# Auxiliari, DPPD, People, curs.pub.ro
dn: ou=Auxiliari,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
# search result
search: 2
result: 0 Success
# numResponses: 6
# numEntries: 5
It seems that the filter is ignored.
On another ou, this works. It is very confusing:
# extended LDIF
#
# LDAPv3
# base <ou=ACS,ou=People,dc=curs,dc=pub,dc=ro> with scope oneLevel
# filter: ou=Profesori
# requesting: dn
#
# Profesori, ACS, People, curs.pub.ro
dn: ou=Profesori,ou=ACS,ou=People,dc=curs,dc=pub,dc=ro
# search result
search: 2
result: 0 Success
And I have multiple OUs under ou=People and on some of them the
results are as expected on the others are not.
Mihai
On Tue, Jan 22, 2019 at 8:43 AM Mihai Carabas <mihai.carabas(a)gmail.com> wrote:
>
>
>
> Mihai Carabas
>
> > On 22 Jan 2019, at 00:06, William Brown <wbrown(a)suse.de> wrote:
> >
> >
> >
> >> On 22 Jan 2019, at 09:15, Mihai Carabas <mihai.carabas(a)gmail.com>
wrote:
> >>
> >> Hello,
> >>
> >> Recently I've upgraded 389ds to 389ds-1.4.0.20 on a fc29. It seems
> >> that the bug
https://pagure.io/389-ds-base/issue/49617 and also
> >>
https://pagure.io/389-ds-base/issue/49443
> >>
> >> [root@ldap ~]# rpm -qa | grep 389
> >> 389-ds-console-doc-1.2.16-5.fc29.noarch
> >> 389-admin-1.1.46-2.fc29.x86_64
> >> 389-ds-1.2.2-14.fc29.noarch
> >> 389-console-1.1.19-1.fc29.noarch
> >> python3-lib389-1.4.0.20-1.fc29.noarch
> >> 389-ds-base-legacy-tools-1.4.0.20-1.fc29.x86_64
> >> 389-admin-console-doc-1.1.12-5.fc29.noarch
> >> 389-admin-console-1.1.12-5.fc29.noarch
> >> 389-ds-base-1.4.0.20-1.fc29.x86_64
> >> 389-adminutil-1.1.23-11.fc29.x86_64
> >> 389-ds-base-libs-1.4.0.20-1.fc29.x86_64
> >> 389-dsgw-1.1.11-19.fc29.x86_64
> >> 389-ds-console-1.2.16-5.fc29.noarch
> >> [root@ldap ~]#
> >> [root@ldap ~]# cat /etc/redhat-release
> >> Fedora release 29 (Twenty Nine)
> >>
> >>
> >> If I do a search with a filter and scope one, all the entries in that
> >> base are returned:
> >>
> >> [root@ldap ~]# ldapsearch ... -s one -b
> >> "ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro" ou=Profesori dn
> >>
> >> # Profesori, DPPD, People, curs.pub.ro
> >> dn: ou=Profesori,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>
> >> # Asistenti-Man, DPPD, People, curs.pub.ro
> >> dn: ou=Asistenti-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>
> >> # Profesori-Man, DPPD, People, curs.pub.ro
> >> dn: ou=Profesori-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>
> >> # Externi, DPPD, People, curs.pub.ro
> >> dn: ou=Externi,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>
> >> # Auxiliari, DPPD, People, curs.pub.ro
> >> dn: ou=Auxiliari,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>
> >> # search result
> >> search: 2
> >> result: 0 Success
> >>
> >> # numResponses: 6
> >> # numEntries: 5
> >>
> >> If I replace one with sub, all is correct. Can you advise me in this issue?
> >
> > I think this is correct. You have used a search base of ou=DPPD, and you are
seeing all the entries “one level below ou=DPPD”, but not including that entry, and not
including any child entries of x=x,ou=DPPD.
> >
> > You may either want -s base, to show only ou=DPPD, or -s sub which show-s
ou=DPPD and all entries in that subtree.
> >
>
> As you can see I have a filter ou=Profesori. So with a scope of -s one (all the
entries one level bellow the base) and that filter it should return only one
entry:ou=Profesori,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
>
> Thank you,
> Mihai
>
> > I hope this helps, but I think there is no issue here.
> >>
> >
> > —
> > Sincerely,
> >
> > William Brown
> > Software Engineer, 389 Directory Server
> > SUSE Labs
> > _______________________________________________
> > 389-users mailing list -- 389-users(a)lists.fedoraproject.org
> > To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
> > Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> > List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...