Hi, I tried a woody->sarge install, and the offending ldif file does not work on 2.0.23, so this is not an RC issue. It is a regression for sid -> sarge and testing -> sarge only.
Yes, I meant 2.2.23-5 not 2.2.25 in the report. Attached are trimmed down example ldif and slapd.conf files demonstrating the problem. Regards Alastair
dn: dc=example,dc=net objectClass: top objectClass: dcObject objectClass: organization o: Example Ltd. dc: example dn: ou=domain,dc=example,dc=net ou: domain objectClass: organizationalUnit dn: ou=people,dc=example,dc=net ou: people objectClass: organizationalUnit dn: ou=dublin,ou=people,dc=example,dc=net ou: dublin objectClass: organizationalUnit dn: ou=staff,ou=dublin,ou=people,dc=example,dc=net ou: staff objectClass: organizationalUnit dn: dc=example.net,ou=domain,dc=example,dc=net associatedDomain: example.net dc: example.net objectClass: dNSDomain objectClass: domainRelatedObject dn: cn=John Smith,ou=staff,ou=dublin,ou=people,dc=example,dc=net cn: John Smith sn: Smith mail: [EMAIL PROTECTED] mailMessageStore: /srv/mail/dublin/[EMAIL PROTECTED]/Maildir/ title: Chief Financial Officer uid: john.smith uidNumber: 2001 gidNumber: 2001 homeDirectory: /home/johnfa accountStatus: active objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: qmailUser objectClass: posixAccount objectClass: inetLocalMailRecipient displayName: John Smith mailHost: dublin mailLocalAddress: [EMAIL PROTECTED] mailRoutingAddress: [EMAIL PROTECTED] businessCategory: staff userCertificate;binary:: MIIYyQIBAzCCGI8GCSqGSIb3DQEHAaCCGIAEghh8MIIYeDCCDq8GC SqGSIb3DQEHBqCCDqAwgg6cAgEAMIIOlQYJKoZIhvcNAQcBMBwGCiqGSIb3DQEMAQYwDgQIp4gwPu LNXSUCAggAgIIOaCexw/23ywIkucoD3ngxc6CWYI0htf6SnUwduWatIpG4xzfjd9dn/6ZgT8SF1cJ geuUhYM7/Y6qVp9rt4p/rmj4BNgQDVEujJaOD6+V9rX6nyzDAX67Wrkyg4rwvPfiI6CHgkuVhbiVc TDVlBOi3jihHaGCgWsH6bHRw7z52E9wCXb+RJXHTssUfAy2rSk6gwn7kSRWOQyJupl9e1hLhMvPh+ piNdKFyzkgNlbl8RhfWBImGc7IPP3YgikrIu7uhBEgZ3HBmD0Ft9grefz21vdrLLVci04X1dC4gZn ugdE01hm5nHALcykT8UWeMD4IAQPIoKA2CBJVcGv6P+/C+C9RDA/c81QvQGnJVh4IszvArXIqIlcw 3KeDEMy0M/msJyrP1F2d4zyFNo+oT/vU1Z+Kwzn6bo0LS1fNI3of1fAJo+ggJB8ZoZd0f5u9kPghy xa1niDwYB4VqCc6anZhZA959vtA9+RJG90tZvV3LNZwyreZBuV7/VQD/8BQIyru/inHmImuaFFdnD rUF5bHiTDhk8VuGtgdvsnqQ57lS1g0/Hqy6Q3oBJPN3w8IwTHUidcSFOxJh8kHeTIjCyCzsOeWzXI /Xvny8tYv5UfqgJcqiKwCBvIB84NPv+q9//hQnoElDBl08UyGwaCGMrvEDIf5/MDUSxPkNpT4CQD1 EMmwM49aWARHg2HgOtim6iRfPHRjUbgBMnR5rrXo3L/L0TFnvdDx9ELTTVguSkS8hj0+kOpqOyObq WyIxfzYC734s7IHkXcSjM2MD6NPe+7YRmk3pLcBY6BK3jQ0jezQUeUHCTgz6PW6zZeCDBGaMbojo/ 0Uif42r3s18aDlXFjt+jflvqdCC2eHF1fpB1bP39Vhi9PMAHHQ+qEyBgbipjIdV8M4AGFhiCdSzSj YAODVYD5p7iGMAxJgtf08vcGvs8uJ2uBuTZFrWuWjFBYrW92tFK+AirXljMWX4BPhFWLZGmoohnRS tLCGLSXVrwJEAEe4Q9NwDlmgP30spnIyoDr4orjcRf3U5394vx638OPwI4nFl5pLRbQ3lKQc98XBa Dy2eynIhTF78OqRPHNYGkF1DDzEXiHoWsNzmJ5K9DEj/zWjVOjFO1ZPTP+D9nHxrL7kUSbyksmXJE kqkclM8KjzzklsJWpm32tZQBj6UNpVPjWqV1Ph88HDBkSaDPOB1ZbSUvqlecMv1yyjwqPY5EEyOKv 2+KS7BFJaYlV2lYatmf91VXLNkBJS3KYjSZtI4Y1uMM6QKwHMUlXyjdXhOaqSnKgjTQ5XotOVSIUR oRrcH5ql9NPGdBHP3d8+f6jbCv8AmHaGODxb3TyjEdypBO+9uWTUalEGxYSmC9epyc86Mvbr4xLxY dIZBnd4VyfFapPgr4iMgmoUZ+8y6n6LbbllzBcNHDw43oWXP+JK8vaZVgIEYvQtw4BlAoIztjX8yF Z1GuGfQweZUzgUjN6gFRIeeCHcDcRFSVKDo0WGI92WbpEXoZr4bx8mDk13wQteHPyGJP0rN7UJG5A UwvbFE174dXoSuJfR1o7xPk0IOwj7TZ0xkg+FhTaN+nyC4rziyqdEzaPoKHYkvypmzUXcpkOPd0ub PYFlgR4+E5E2tgRm79x3xJDwLBKU015XcdnDKbOmRFX0VhFk4KxiBCiqH4/XUN0q0rYCYsSx9MKZO QTPBsdwVrdADSwlOMlv7TbXhOPrsEpO94H8YRt3OlXcdt/f/Jm7Y8MlUh/XBApth/wGUsKBMTrHy6 LvErkNLqmLQQGzLjTCJYOnMrMNjqTiCZSq+dNaDb5++mbfopz90VMJ1kw/8nvx/6/+jufhDYGdX/r +BMJUZNi6GyBAf5y5mVpcoZ0X3kVGr5hQConOIAVC+XwpBtelt3FatbWCB0bCrXwFkQDwYXhjFXeS DI1rw7LTCIYhXl3DNgtKmgfU6IzHo8iOaENFLZFFQswVX6AoMDjWft4Ie+KTCnj9f1yD5voVSsaDW bLChYKM7/gnnt9eStZ8VKHk0nlAhy4WaU/jEInm2aIrHYN2xm8kgMwWYZR2o7SxVIe8XAkX4/zMnQ nC7RdxguEhscOXg5EtKIpSokpnCsXlfw+2bs5t7pN4BWdUvhI7ZTN+dYHyVNSuJFEHhrWZauur9mj D40SpDSoNFhtxjxdG0xWTCwR+OmJJ44d7e2HglVtlE3ZMxDG+N0K4mMlAoEaQDba3FsOlFlQio6EI Q5gCXFlotgfe6Ex5352bTSfwRk3OSjSvXdLSzerRlzSve00TJoCIQT96mAw9wsCi38Qjl+HYICujF Q6c97ZzyzQmYfXE5ACzcrzHKRN6/tnXMz6bd8VYEGS1lCjsptsCdxEyxfMxxFtPcfmENj47vAtr8P yeYdr1qtuaCaLxNvDTRaf45bxMbzKESvi1SvhytgP26356tXmeKbRn3OG+X7n3c2DXOVkn1/yZuOP K5lGu6muG4YIE2FqNJyhxGyEBEsCTV64aDN8BAkXaCFR1qv+Oz55nU+f7ENpaT0T8G9OeK74RMr4s eRbrynihGfVpgUAN/GEOljLHHasvuMEyBCj8venzMcu77LpBb4yzE+GlsmDfBzXRYAO36yaw36RW9 CsdlFUwR5gsOU9EIQpZRXRvOUelgBv2RXPMX5Z6hMTvoxSCob+O/ZIJ0QY0aityb9hRf7GjaqKMGk pbvnFaGp6xE5RNEfvpRqqTZ+N8HoZE8iNHKg8xJ+2RXWopoFT5+z900ROUNRrdLVjSrZNRMf+PtZ9 WvXXiiFfbR5gxoA8F2HtCjAyayPeh4BWunE+F2dGtHFhiwzrXFIz3yApivEK0oXcMPIacewyHMLdp LDH8sChuQ5ujfAjlh+QyzKzRB+PbLliG4x6IHFKmrHhG5HM1Tp3H0p3QVnmV9+A2KPXITruJ9PRv9 hLdUaHUPwqhf1sJX0o2p4x2WwIEbHGgk4GBv1o3jI3xprWjqkuyegfsMJlRi25lu6YfsgPYxsC7Ok TsqJzM/v2lL5LYyTb9AkaQBQp4I3mOzSi8jLzYM9zgXPkSHikF58ZpFK9rMGiHN5e9XBxfGmU+NG6 sVnhnbZg3iTXeYR7qSPQqo3jIi2xfqG/w7WHcC0Ua/X5gKpqNVu4mQUXlMWK0ydl9Vto+lpOhQMhg wzPYwgNNLZfv2X5aUhJ9c54drNmivubnpiRvnaquIE3I7QNovAH3qw+xopvhpEMspGfK+FrAuVq7t dSxOwk4+Le/GmEtxp8OehjlNIRQ6EBw6DLIwtV5HV5pHPIuk8zu4CpeBbhPpqr6Msdsh7zdXW/oJ7 ki+NTbi4tgaest18oP3L8mh5jXl/3hcvENFY4p/Y0YSQ6GBYAVo8JHrUBY0P5Le401PKTedhv+SzL 6jKuUh5ag5pvN9AVzkwyJmfWCvmuf6cogxCr2UVCpNAtDVpP2ns58eF/YBkPgCAzfkpkulaki+r6P ENjqa+7CUr9ZzTnTxFSDIgymkw58MX5xtTzzhJEAcOoULdarAH/+XWDv7U8Mbjw2V4exb199nKnf/ EyAQ/Q5DASKiOdsDpQBmkqEvmw3GGqobMlmOX1rYRAj8Laqv9dsKjyCZvKxTOQajJ5E3fcYiYQYxZ s/TopL2Ys4/Ojfr/pS/R4P+4kp6514Y0GVW+XdB/5dyz/fjvv9GmpIA+Kaj7PiTRROa2Ca4Y8Clxj CennGvKIshC8GBwG64Gc0l8kgyZ9atppgFx8L2kADow6g/t1R9O96dCXqzSClO6D0ppFCymPm+4mD OxkZUCQpSXeOX8YZ6dEKRFoXw9kM2mcp/HB/auB4vkMtVaCFEwEmsHzOFqEN7O7p/zCbqoGzdHia0 9MHd69WjtKXKDMqrwqhyW9+saMInV0/D9qS52ra+8rob/06qe5xxhDPED84eyydtYtcuetsohO3vD +0vJ9Yz8JjSDU5XQzUEQelcOWQCaapuw2qBqZ4ugCPHKXT551a5AhbLMWsIlIEnQfQSaKkCTV8Nv/ XvrWqVz/ELu7K6XhL0l8VsRQWcY+6cT2R6m66TRr88W5ZMVx+dhnppiQAzz8Z1Y4fJ5Ur7eH3TkA/ 7+K1yj6XrL2V+0EmpnnuFXkP2t/nn/BSxlsVPPY7Yrt/9U9rC7964DIHLhTd/iTDEc9hvfHfxvAjm BowySkVnzbwyPAQhZUcGbpfQ0yy/liWDu+QBJONokychSj03o9iSXuRZ+m1MB7F9azpa06KsoKl/+ 7iQHq+8DD9mGdmGeyJj+bsKHG9UuS5WvY80Fxcb3MQh553uDM/nNNOhBjYiKPMdvaV9KQwqRsbZ2q n/hsWTaZvPNIzdnCNE72WFKgUz1QhQ7DO0bZ1Y9zAkaAv3oU5AH+0QvEGDnVFX1D3s8ojvmcoCGs9 Jr60IdMdahsujDpKqWqMU7VMc9JgNhsQnyVTHs7Jl76yk8HMLsnuwU7nj5PVcrLOgYAP/OhFIlOwu kgcu8B4jfX37rgeo1Z//spKhIDddgIgJiQwRIgWPYWBuVj/+n3rwMogJPTKC7Mh2HMTcmVKLWCvBu HJVstMKufl4ZI0WW04SwVnaR0AwRzmtTG6Et2AH9tq5c6cx8L6SQx8g3utQTvpf9R8XHL7nl1QrwO oYcwz5l+826QeiMs4DY0ZDutIF+wCpEXTUdrRmQhnvgMtt/GNUbo5UPq0uljo32ZPMWcUxGD+gRqT EqIsROImMEn5Ul8xVreqBSj7EgCyvaZbmPPW/ACVUX+3lN/N7qoUH/qrGDwiq7dt3ppDc8yAArxw1 5jOrdy5ok2DCCjWaAI7cnzsDTtifhabRAyb7jDyzdsp2skn0IJRdqfCGyVa7iYa8sukQ4rtX3vMwT DnKcaw4er+HhOFNrFb+sN0jrcoT3EpQmi3RY8ISrawBCWWSJ1zfIZ0v06ljy/ddRpOmsAUilpCZ+w WsT6UwggnBBgkqhkiG9w0BBwGgggmyBIIJrjCCCaowggmmBgsqhkiG9w0BDAoBAqCCCW4wgglqMBw GCiqGSIb3DQEMAQMwDgQI89LJIldtBG0CAggABIIJSEnihbAu5PF2IyOylh4LBImej5QCXS6YEOmc tLIpyiF5yL3juZ/NvMjk0/OSIY/m6HPdlEmCrLxoBywBPp+r7bG5KuEq2kzeKNrj8nnN2csKRBFna iYoqQucVpb5S3WDUznghNDm9m1wwUMqT2H4ajPLip9PPc+Vq2sSh1FgQQX62R9rN24T0Xq2E97kkY h7CRjiAuvqdfVgtk1nWZG0pbvWqFeRvhj+y+BRWKkroE59KtYzkG+dab4/i1+zg3Neo9l5kRAGOOE zPm9RR6EOkciZ0Q6yCdDogUnFeWITDmZHz8M4FdJaxnGymrDCsmkICp4AR6MNKgMF/PCidjv3NHJX LMX5et1bNIcN+igWGfeRMDcvBVAYxPsTX3RWfprCyJCQTnKzYv8Pyg8WiV1ln9Rl0RyDHefVrYctM rJxzDwZNKYAjZdUbzJ87hoZWTDQ6tdPiczzKTco0CSnqM7J/2nmD2hHU6LfjuouoEDCCudrdPgL1r VrSd71rUc5N7/mJ5L5CcoQS5zj8UKrNHD2rRPEcYqq3WKeXViyJ6dVoaaC3tHLSyYUPc/GmClbEJZ NE9KCv82pPqYhLq5W3rZg5+gIpMkyAt7Fn4j71tB0TP61cU172WOMKXdjeFnwcAh60O8+Pz72VF4i S8F+7Y4udb3XValHE8L/4VSTTf8mt30xe30xx8Ck4PGqqW8K3UFprqyHvTExhG/IzEu830bDmJhJM Q4kUvLOj/mxq9/c967jBWMgn6Yar/Q//y+rAzy6fkgTxPDGeMTrGpFlXk/RYQ45+5K7vBVZyrdHXh PWvEaxLdoscXo9dWOS2Nd1TbyGP1a5hBPkEWBoyTNh5URBuW4liN+sCwpEQn6W2GRf3e+yvaKwTET cEHrawrx2g7MBVBquz5zUoGKhcU4zybwI3U5aHCok5XE7dETej7NGLcbpCLttaMIYv3j2rYR/116L YVLocT2XPssVBFzpso7CeXhTkLG9OluU0FUwgZo3uGnoQjJp2SJH/d3mwziWC+bFCvR/vUVLyPCYY GiWyum854F8K4vRmP58G4foKbTdnKlg45/NHhoevk+KsVtdslNsgUv7EGFXI2TcGtq8kD0OfefWzw KgWCocVLRQx6HZ1XJj1uxyXRh9IFC1G5oinn9NE0q/t0aZDO67LyIPEYYyJOaRQ83TmAw+v7jg7Pc 3ZlIC6rkkBp0U8cYhtY/x4VntYpn6gZmrzES7gv5aqfLOcqFpApAJequ4S8Dszzx5eLNQO4o4PGOa hH4sNWC3EFfQNtFnZfTFxOd/YxHguBWKAbPwPsyLIEPrj+QwCW5mm2/LawrteJjxt2VwgELTzUEYr y43GLdLyi4nv2/OE4/CYa6ljxu6GQATm/kVaCi+da9MLxOg3KFA9YIU61nhXbgGnFMugPl+FpFNgV eBjAyjaU6SEf3tPH3WZjkMHUQCXFgIB2Y115zuk4/ETiXBL4rpoxuwqrTAC5V+6CmhuTuUSQZ9R9Z KJTLfz/lkKYPTSvgWPewugOfZnnq9FqWCwHG2lnAEBGlPOkCKChTfFwHA9UnIG/chGI2DpV0aTxDT hKekn7fPg3Y6Aghb5JLrseTFVmIC0BPXHvfjIPCefh7sI4exIxY7GuM6fHyo/RFfoW39S+kfv424C 4605ekn/OtViWGitIXItN5gR1MUlFGzWHlpcbV8x2Y9GnHDI1rOaDql4mEPi7zOHuRqtmDm/OY2ZD hN4foZSHvzAgyu6tAuxm80O2e7MHp7bVdcdTTthNGqgri/osEIxIp/wxhwwlPYbwJBoje65iHuJEE D+tFeCy2AdShdC3DrQ/n+m5Gh7b0EjaX9/7c8KV6oUm87FnsOBJCNYKIs5Crq4DyfD+xOjWj+qQvg W0FOT+ECtDQmKLGoYAnUWPvqzvBC9lrZxAu0xgwEUagemE6Z1qjRa+Ca5dcEr5KpFnd8AAck2N9U0 PatizvuqwsAS5kYR2P99/wIZD9osF8ZK2TeExMDu4vPQYd6HFHUixjGBUWaCUs0GF1tG7lbeFLYyJ tMkXTFjBmzjORN/8i78WmIjJS5/OxIhnPUwAYHejBh6nV9i6Vm8jeOE3rMiI/LUrTMDYSn95clNZl mXR0TDeVjUr3xe3yq6GNKMDGP4ukLkliJJFD9zNJ0e2N8HgsydDy7CT2d9pLAxcn3BFQirYv+Q1HJ yfF9ayyd8ImVLfuZt41xidgwy/fn0hE2pqYZ12mnqNZa1B7GazF1K6RXsZPVDlRCgDTS914h3y9nu Yq30oiULW6/XjGj4qmSiXpHcp3bIM0J6YYTHnW/7IYu5vVHyoZD8tlc8kMRPv+6ZvW3dM6hzPvUSb 2+6ut56qw5ErAtrRARLHcJvxQJwJmHlNMSqwETW4kc75mZdSb72Zvvtw8UHLqIsLR6MNNHKhAGBf2 dtIXiEw9gl7cUQ0IjUeUHRoan9+/EMb7giYypyi9ADfv5hf7bohS9j1WFbhD52157w8MBWFQUjOwr f2nO7TP+8P72Z9D8UTebOvT2bHvSsL8gC2yGlLkljxqseey53mbCahT/A/oIcj2DRE5UfmWBgAexY hCxdSYyv0Jbx0ILhrQhJp2e6vmF/tiC755ij3JBCGZIP0LN9TyhZ7Co5UtK53qGyXdQPXTTYtMyG/ KRzbp6y7ym3O7yA3ka8oVRncFXSraZmsYWeaTCZZ0Xg8vVq7XCpDxCemwgL8IXvNuMQ5J88aIaWC0 Pc+/rOAIkYCOSlSRKASmNdS0RbOj8oiRvIlwZ4/Mnp4VbG6RPuBcTRFvwRQ3YuvVu3XnT0Z1sU4i8 +p/Wa6GzLoisJ6mUoQy0fwy70UVRaP/gXxLm/06+ITEvjjGIP9+4w0abBxgEwLF2DSqgmv8OiGI6R mBmRX+68gZ6vhcvceuN8r775U+/ZBkwTz8/KNdfwbFP72k5B+OnMHJMCzXiGvzES4AUdxJUESdpmO gN8bFGoR2xzJvZQ65Yut7Nd1migGkR0g/QXpOumJ9qpx4Kq24gNY40i6cA689GeAyaG85i3M8pf6G BuqbyFCjTRwHlX4+BsDuChCnegs4D8c49mPP/LgtKSmYed2vnI9OB6dRyXbrU7srrfS7jqTfFMqcL TGuP+r8eSuenkr+TFr9PmdKzSdfo1EjqIxpGs6iyG4Z8hAEg/TlWajElMCMGCSqGSIb3DQEJFTEWB BTIiWhH/ua9y738ePHiA86aG5okrDAxMCEwCQYFKw4DAhoFAAQUlTSQLV5kXapMhmQzdOVKV5S+Ii wECIt6tbOVGGupAgIIAA== userPassword:: e1NNRDV9Y1Z0YURzekw1elU5UW4reFd4ZnQ0R2dQYTlNPQ==
# This is the main slapd configuration file. See slapd.conf(5) for more # info on the configuration options. ####################################################################### # Global Directives: # # TLS Security Configuration # # Features to permit allow bind_v2 # Schema and objectClass definitions include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/corba.schema include /etc/ldap/schema/openldap.schema include /etc/ldap/schema/misc.schema include /etc/ldap/schema/qmail.schema include /etc/ldap/schema/dhcp.schema include /etc/ldap/schema/evolutionperson.schema # Allow anonymous access to our public area defaultsearchbase ou=public,dc=example,dc=net # Schema check allows for forcing entries to # match schemas for their objectClasses's schemacheck on # Where the pid file is put. The init.d script # will not stop the server if you change this. pidfile /var/run/slapd/slapd.pid # List of arguments that were passed to the server argsfile /var/run/slapd.args # Read slapd.conf(5) for possible values loglevel 16384 # loglevel 0 # Where the dynamically loaded modules are stored modulepath /usr/lib/ldap moduleload back_bdb ####################################################################### # Specific Backend Directives for bdb: # Backend specific directives apply to this backend until another # 'backend' directive occurs backend bdb # allow bind_v2 ####################################################################### # Specific Backend Directives for 'other': # Backend specific directives apply to this backend until another # 'backend' directive occurs #backend <other> ####################################################################### # Specific Directives for database #1, of type bdb: # Database specific directives apply to this databasse until another # 'database' directive occurs database bdb # The base of your directory in database #1 suffix "dc=example,dc=net" rootdn "cn=admin,dc=example,dc=net" rootpw "foobar" # Where the database file are physically stored for database #1 directory "/var/lib/ldap" # Indexing options for database #1 index objectClass,uid,mail,mailAlternateAddress,associatedDomain eq # Save the time that the entry gets modified, for database #1 #lastmod on # Where to store the replica logs for database #1 replogfile /var/lib/ldap/replog # The userPassword by default can be changed # by the entry owning it if they are authenticated. # Others should not be able to see it, except the # admin entry below # These access lines apply to database #1 only access to * by dn.regex="cn=admin,dc=example,dc=net" write by anonymous auth by self write by * none # Ensure read access to the base for things like # supportedSASLMechanisms. Without this you may # have problems with SASL not knowing what # mechanisms are available and the like. # Note that this is covered by the 'access to *' # ACL below too but if you change that as people # are wont to do you'll still need this if you # want SASL (and possible other things) to work # happily. access to dn.base="" by * read # The admin dn has full write access, everyone else # can read everything. #access to * # by dn="cn=admin,dc=example,dc=ie" write # by * read # For Netscape Roaming support, each user gets a roaming # profile for which they have write access to #access to dn=".*,ou=Roaming,o=morsnet" # by dn="cn=admin,dc=example,dc=ie" write # by dnattr=owner write access to * by * write by * read