Apache DS sending values in response to "no values" query
---------------------------------------------------------

                 Key: DIRSERVER-1380
                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1380
             Project: Directory ApacheDS
          Issue Type: Bug
    Affects Versions: 1.5.4
         Environment: Apache DS 1.5.4 Python 2.6.2, python-ldap 2.3.8
            Reporter: Thorsten Kampe


Apache DS replies with values although I specifically request not to:

[1]>>> import ldap
[2]>>> connection = ldap.initialize('ldap://')
[3]>>> connection.simple_bind_s('uid=admin,ou=system', 'secret')
[3]    (97, [])
[4]>>> connection.search_s('ou=system', ldap.SCOPE_SUBTREE, 
filterstr='(cn=*)', attrlist = ['cn'], attrsonly = True)
[4]
[('uid=admin,ou=system', {'cn': ['system administrator']}),
 ('cn=Administrators,ou=groups,ou=system', {'cn': ['Administrators']})]

But in contrast OpenLDAP's ldapsearch -A works as expected:
~/.ldaprc
BASE    ou=system
BINDDN  uid=admin,ou=system
URI     ldap://

thors...@tkampe[~]> ldapsearch -x -w secret -LLL -A "(cn=*)" cn
dn: uid=admin,ou=system
cn:

dn: cn=Administrators,ou=groups,ou=system
cn:

The same query works (does not return values) if I query an Active Directory or 
eDirectory server.

As I wasn't sure whether this is an Apache DS or Python-LDAP bug I asked in the 
Python-LDAP mailing list and the developer's analysis says "it's an Apache DS 
bug". ("I did and watching the LDAP traffic with Wireshark shows that ApacheDS 
returns the attribute values although searchRequest::typesOnly is True
on the wire. In opposite to that OpenLDAP's slapd does not return any attribute 
values in this case.")

Please read his full statement here: 
http://sourceforge.net/mailarchive/forum.php?thread_name=4A5B192E.3010005%40stroeder.com&forum_name=python-ldap-dev

Thorsten

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to