Torsten Schlabach (Tascel eG) wrote:
Hi all!
I am trying to setup the simplest possible LDAP proxy with OpenLDAP.
Actually, I do have a machine with one interface on a public IP address and
the other one on the private network. So all I want is a pass-through of
any LDAP query 1:1 from the proxy which sits on the public IP to an LDAP
server which can be reached only through a private IP on our internal
network.
Here is my config:
database ldap
suffix "o=top"
uri "ldap://192.168.12.34/";
My problem is: The query sent to the backend server always contains a
(?=undefined) condition, which leads to no objects found.
In other words, the query I send to the proxy is for example:
(&(?objectClass=mailalias)(dc=xxxx.yy))
The back_ldap will send to the backend server:
(&(&(?objectClass=mailalias)(dc=xxxx.yy))(?=undefined))
Any idea?
Turn up debug on slapd and see what filter it actually received. Also, what
version of OpenLDAP is this?
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
