More verbose: # extended LDIF # # LDAPv3 # base <ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro> with scope oneLevel # filter: ou=Profesori # requesting: dn # # Profesori, DPPD, People, curs.pub.ro dn: ou=Profesori,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro # Asistenti-Man, DPPD, People, curs.pub.ro dn: ou=Asistenti-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro # Profesori-Man, DPPD, People, curs.pub.ro dn: ou=Profesori-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro # Externi, DPPD, People, curs.pub.ro dn: ou=Externi,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro # Auxiliari, DPPD, People, curs.pub.ro dn: ou=Auxiliari,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro # search result search: 2 result: 0 Success # numResponses: 6 # numEntries: 5 It seems that the filter is ignored. On another ou, this works. It is very confusing: # extended LDIF # # LDAPv3 # base <ou=ACS,ou=People,dc=curs,dc=pub,dc=ro> with scope oneLevel # filter: ou=Profesori # requesting: dn # # Profesori, ACS, People, curs.pub.ro dn: ou=Profesori,ou=ACS,ou=People,dc=curs,dc=pub,dc=ro # search result search: 2 result: 0 Success And I have multiple OUs under ou=People and on some of them the results are as expected on the others are not. Mihai On Tue, Jan 22, 2019 at 8:43 AM Mihai Carabas <mihai.carabas@xxxxxxxxx> wrote: > > > > Mihai Carabas > > > On 22 Jan 2019, at 00:06, William Brown <wbrown@xxxxxxx> wrote: > > > > > > > >> On 22 Jan 2019, at 09:15, Mihai Carabas <mihai.carabas@xxxxxxxxx> wrote: > >> > >> Hello, > >> > >> Recently I've upgraded 389ds to 389ds-1.4.0.20 on a fc29. It seems > >> that the bug https://pagure.io/389-ds-base/issue/49617 and also > >> https://pagure.io/389-ds-base/issue/49443 > >> > >> [root@ldap ~]# rpm -qa | grep 389 > >> 389-ds-console-doc-1.2.16-5.fc29.noarch > >> 389-admin-1.1.46-2.fc29.x86_64 > >> 389-ds-1.2.2-14.fc29.noarch > >> 389-console-1.1.19-1.fc29.noarch > >> python3-lib389-1.4.0.20-1.fc29.noarch > >> 389-ds-base-legacy-tools-1.4.0.20-1.fc29.x86_64 > >> 389-admin-console-doc-1.1.12-5.fc29.noarch > >> 389-admin-console-1.1.12-5.fc29.noarch > >> 389-ds-base-1.4.0.20-1.fc29.x86_64 > >> 389-adminutil-1.1.23-11.fc29.x86_64 > >> 389-ds-base-libs-1.4.0.20-1.fc29.x86_64 > >> 389-dsgw-1.1.11-19.fc29.x86_64 > >> 389-ds-console-1.2.16-5.fc29.noarch > >> [root@ldap ~]# > >> [root@ldap ~]# cat /etc/redhat-release > >> Fedora release 29 (Twenty Nine) > >> > >> > >> If I do a search with a filter and scope one, all the entries in that > >> base are returned: > >> > >> [root@ldap ~]# ldapsearch ... -s one -b > >> "ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro" ou=Profesori dn > >> > >> # Profesori, DPPD, People, curs.pub.ro > >> dn: ou=Profesori,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro > >> > >> # Asistenti-Man, DPPD, People, curs.pub.ro > >> dn: ou=Asistenti-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro > >> > >> # Profesori-Man, DPPD, People, curs.pub.ro > >> dn: ou=Profesori-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro > >> > >> # Externi, DPPD, People, curs.pub.ro > >> dn: ou=Externi,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro > >> > >> # Auxiliari, DPPD, People, curs.pub.ro > >> dn: ou=Auxiliari,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro > >> > >> # search result > >> search: 2 > >> result: 0 Success > >> > >> # numResponses: 6 > >> # numEntries: 5 > >> > >> If I replace one with sub, all is correct. Can you advise me in this issue? > > > > I think this is correct. You have used a search base of ou=DPPD, and you are seeing all the entries “one level below ou=DPPD”, but not including that entry, and not including any child entries of x=x,ou=DPPD. > > > > You may either want -s base, to show only ou=DPPD, or -s sub which show-s ou=DPPD and all entries in that subtree. > > > > As you can see I have a filter ou=Profesori. So with a scope of -s one (all the entries one level bellow the base) and that filter it should return only one entry:ou=Profesori,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro > > Thank you, > Mihai > > > I hope this helps, but I think there is no issue here. > >> > > > > — > > Sincerely, > > > > William Brown > > Software Engineer, 389 Directory Server > > SUSE Labs > > _______________________________________________ > > 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx > > To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx
