[389-users] No results from nsContainer subtree search

William william at firstyear.id.au
Thu Apr 9 23:02:46 UTC 2015


On Tue, 2015-04-07 at 15:00 -0600, Rich Megginson wrote:
> On 04/07/2015 12:00 AM, William wrote:
> > I ran the following search:
> >
> > ldapsearch -H ldap://localhost -b
> > 'cn=nsAccountInactivationTmp,dc=example' -s sub -Z -x -D 'cn=Directory
> > Manager' -W  '(objectClass=*)' '*'
> >
> >
> > I was trying to locate the object:
> >
> > 'cn="cn=nsDisabledRole,dc=example",cn=nsAccountInactivationTmp,dc=example'
> >
> >
> > The search yielded no result, but the same search as:
> >
> > ldapsearch -H ldap://localhost -b
> > 'cn="cn=nsDisabledRole,dc=example",cn=nsAccountInactivationTmp,dc=example' -s base -Z -x -D 'cn=Directory Manager' -W  '(objectClass=*)' '*'
> >
> > Works and correctly shows the object. What's wrong with the first query?
> 
> Missing (objectclass=ldapsubentry)
> 
> Entries with objectclass: ldapsubentry are hidden unless you explicitly 
> specify them with either a search of scope "base", or by specifying 
> "objectclass=ldapsubentry" in the search filter.
> 

Ahhh that explains it. Thanks for clarifying.


> > Other subtree searches on nsContainers work correctly.
> 
> nsContainers that are also objectclass: ldapSubEntry?


No, the other containers did not have this objectClass.




-- 
William <william at firstyear.id.au>




More information about the 389-users mailing list