Dear listmember,

on RHEL4, openldap 2.3.24 Iam trying to read the schema information using ldapsearch.

Iam using the standard schema core.schema, cosine.schema, inetorgperson.schema and a self made schema extension. The ldap is running happily and I set up a refreshAndPersist synchronisation with other ldap "slaves". The ldap is fed with around 300k entries.

When Iam trying to

ldapsearch -D"mymanager-dn" -x -w mypass -b cn=schema -s base "(objectclass=*)"
ldapsearch -D"mymanager-dn" -x -w mypass -b cn=schema -"(objectclass=*)"
ldapsearch -D"mymanager-dn" -x -w mypass -b cn=subschema -s base "(objectclass=*)" ldapsearch -D"mymanager-dn" -x -w mypass -b cn=subschema -s base "(objectclass=*)"
ldapsearch -D"mymanager-dn" -x -w mypass -b cn=subschema "(objectclass=*)"
ldapsearch -D"mymanager-dn" -x -w mypass -b cn=subschema "+"
ldapsearch -D"mymanager-dn" -x -w mypass -b cn=subschema -s base "+"
ldapsearch -D"mymanager-dn" -x -w mypass -b cn=config -s base "+"
ldapsearch -D"mymanager-dn" -x -w mypass -b cn=config "+"

Either I get "no such object", for "cn=schema" (which is probably ok), or an empty result for example with "cn=subschema". Using cn=config as the base, show an "insufficient access".

Searching my schema information in cn=subschema should imho be correct, because a

ldapsearch -D"mymanager-dn" -x -w mypass -b o=myroot subschemasubentry -s base

shows:

dn: o=myroot
subschemaSubentry: cn=Subschema

What am I doing wrong??

Thanks alot in advance!!

Regards,
Daniel

Reply via email to