[
https://issues.apache.org/jira/browse/DIRSERVER-1214?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12838973#action_12838973
]
Quanah Gibson-Mount commented on DIRSERVER-1214:
------------------------------------------------
So, at least with sub, the behavior is fairly clear, it returns whatever it has
access to. But with OpenLDAP, using a scobe of "one", using separate databases
for the contexts (rather than using ""), I get:
[zim...@freelancer ~]$ ldapsearch -x -b "" -s one -h freelancer
# extended LDIF
#
# LDAPv3
# base <> with scope oneLevel
# filter: (objectclass=*)
# requesting: ALL
#
# search result
search: 2
result: 32 No such object
# numResponses: 1
So if there is no "" database, a one-level search says no such object. I don't
know if that's really the correct behavior or not, it's an interesting question.
> Searches done with an empty baseDN are not accepted, except for the rootDSE
> ---------------------------------------------------------------------------
>
> Key: DIRSERVER-1214
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1214
> Project: Directory ApacheDS
> Issue Type: Bug
> Affects Versions: 1.5.3
> Reporter: Emmanuel Lecharny
> Fix For: 1.5.6
>
>
> We can't do a search with an empty baseDN, when it's not specifically a
> rootDSE search (ie, (objectClass=*) and scope=OBJECT).
> We should consider that such a search is spreaded on all the partitions.
> This is not easy to implement without the nested partitions, as the current
> existing partitions are potentially stoed in different backends.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
