Philip, hello.
On 24 Feb 2025, at 17:23, Philip Guenther wrote: > On Mon, 24 Feb 2025, Norman Gray wrote: >> If I have a server which manages a tree split into two databases, one >> covering o=top, and one ou=sub,o=top, then a q uery against base o=top >> with subtree scope returns only objects within the first database, and >> not the second. >> >> Should I have expected that? (I didn't) > > Check the slapd.conf(5) manpage for the 'subordinate' option or the > slapd-config(5) manpage for the 'olcSubordinate' attribute, as fits how > you configure your server. Aha -- thank you! This works perfectly. I'll add (for the archive) that the documentation for olcSuffix in slapd-config(5) notes that > If the suffix of one database is "inside" that of another, the > database with the inner suffix must come first in the > configuration file. Separately, I note that the olcSubordinate attribute is documented as accepting a 'false' value, but seems not to in fact, in 2.6.9. I've opened https://bugs.openldap.org/show_bug.cgi?id=10312 Best wishes, Norman -- Norman Gray : https://nxg.me.uk
