Re: Problem with ldapsearch and scope one in 1.4.0.20

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello William,

[root@ldap cursdb]# pwd
/var/lib/dirsrv/slapd-ldap/db/cursdb
[root@ldap cursdb]# dbscan -r -f ou.db
+
        2 3 4 7 26 27 67 68 70 71 75 77 79 305 1751 1752 1857 1858
1861 1862 1954 1998 2143 2144 2220 2434 2994 3054 3055 3093 3206 3225
3226 3229 3232 3245 3262 3391 3482 3499 3500 3611 3617 3647 3648 3656
3657 5450 5456 5457 5466 5467 5487 5547 5733 5856 5865 5905 5916 5924
5940 6226 6228 6229 6253 6259 6268 6270 6275 6278 6280 6282 6303 6304
6307 6308 6323 7098 7714 8042 8177 8286 8291 8294 8449 8531 8776 8904
9111 9131 9136 9165 9287 9288 9567 9704 9865 9930 9958 10301 10357
10412 10417 10470 10518 10524 10580 10742 10766 10823 10840 10843
10845 10871 11345 11346 11347 11348 11349 11350 11351 11352 11354
11355 11402 11540 11972 12185 15356 15711 15867 16085 16119 16402
16580 16583 16587 16941 17103 17133 17314 17387 18366 18382 18524
18589 18793 18853 19369 20378 21772 21773 21774 21775 21776 21777
21778 21779 21780 21781 21782 21783 21784 21785 21786 21787 21788
21789 21790 21791 21792 21793 21794 21795 21796 21797 21798 21799
21800 21801 21802 21803 21804 21805 21806 21807 21808 21809 21810
21811 21812 21813 21814 21815 21816 21817 21818 21819 21820 21821
21822 21823 21824 21825 21826 21827 21828 21829 21830 27227 36065
36066 36067 36068 36069 36070 36071 36072 36073 42789 42790 42791
42792 42793 42794 42795 42796 42797 42798 42799 42800 42801 42802
42803 42804 42805 42806 42807 42808 42809 42810 42811 42812 42813
42814 42815 42816 42817 42818 42819 42820 42821 42822 42823 42824
42825 42826 42827 42828 42829 42830 42831 42832 42833 42834 42835
42836 42837 42838 42839 42840 42841 42842 42843 42844 42845 42846
42847 42848 43368 43369 43441 43442 43443 43444 43445 43446 43447
43448 43449 43450 45716 45717 45718 45719 45720 52249 52250 52251
52252 52253 55415 55416 55417 55418 55419 55420 55421 55422 55423
55424 55425 55426 55427 55428 55429 55430 55431 55432 55433 55434
55435 55436 55437 56062 56064 56068 56070 56072 56075 56079 56095
56135 56141 58638 58799 59159 60280 60368 63580 63582 63589 63591
63593 63595 63601 63604 63607 63609 63612 63616 63692 63694 63759
63802 63841 64891 64917 64919 65594 65596 65598 65602 65604 65606
65609 65614 65617 65619 65624 65632 65635 65649 69725 72417 72419
72421 72424 72426 72430 72437 72439 72443 72445 72451 72548 73242
73269 77024 79401 79403 79405 79407 79409 79413 79417 79419 79421
79423 79429 79439 79443 79450 79460 86175
=2014
        42801 42802 42803 42804 42805 42806 42807 42808 42809 42810
42811 42812 43442 43447 45717 52250
=acs
        3 42790 55420
=aero
        2143 42795
=asistent
        42814 42817 42820 42823 42826 42829 42832 42835 42838 42841
42844 42847 43444 43449 45719 52252
=asistenti-man
        21773 21777 21780 21783 21786 21789 21793 21796 21799 21802
21805 21809 21813 21817 21821 21824 21828
=auxiliari
        63580 63582 63589 63591 63593 63595 63601 63604 63607 63609
63612 63616 63692 63694 63759 63802 63841
=chim
        43441
=chimie
        3499
=cs
        42789
=dppd
        3647 42799
=electro
        42791
=electronica
        26 45716 55418
=energ
        42792
=energetica
        1861 55432
=externi
        5450 21775 21779 21781 21784 21788 21791 21795 21798 21801
21804 21807 21811 21815 21819 21823 21826 21830 43369 55417
=faima
        6228 42800
=fils
        3054 42797 55427
=fsa
        42798
=groups
        70
=imst
        5466 42793 55423
=inactiveaccounts
        55415
=inginerieelectrica
        1857
=ingineriemedicala
        67
=isb
        6303 42794
=manual
        86175
=mecanica
        3225 43446
=moodle
        3611
=ncit
        3656 55416
=ou=asistenti-man
        21773 21777 21780 21783 21786 21789 21793 21796 21799 21802
21805 21809 21813 21817 21821 21824 21828
=ou=externi
        21775 21779 21781 21784 21788 21791 21795 21798 21801 21804
21807 21811 21815 21819 21823 21826 21830
=ou=fils
        3054
=ou=profesori
        7 68 3232 5457 6259 6268 6270 6275 6278 6280 6282 6304 6308
6323 7098 21827
=ou=profesori-man
        4 7714 21774 21778 21787 21790 21794 21797 21800 21803 21806
21810 21814 21818 21822 21825 21829
=ou=useri2006
        71 3206 5916 9930 10840 15356 16119 17103 17387 19369 21808
=ou=useri2007
        75 1998 2994 3482 5924 8042 8177 8286 8291 10742 11972 12185 18382
=ou=useri2008
        77 1752 1858 1862 1954 3391 5865 9165 10301 10470 11540 16941 17133
=ou=useri2009
        79 2220 5733 5856 5905 5940 8294 9131 10417 10871 16085 16587 18589
=ou=useri2010
        5487 5547 6229 8449 8904 9704 9865 10357 10412 10580 10766
11402 16402 16580 18853
=ou=useri2011
        305 3262 5467 8776 9111 9136 9288 9567 9958 10524 15711 15867
16583 17314 18793
=ou=useri2012
        18366
=ou=useri2013
        2144 3055 3093 3245 10843 18524 20378 21772 21776 21782 21785
21792 21812 21816 21820
=ou=useri2014
        27 2434 3226 3229 3500 6253 36065 36066 36067 36068 36069
36070 36071 36072 36073
=people
        2
=profesor
        42815 42818 42821 42824 42827 42830 42833 42836 42839 42842
42845 42848 43445 43450 45720 52253
=profesori
        7 68 3232 3648 5457 6259 6268 6270 6275 6278 6280 6282 6304
6308 6323 7098 21827
=profesori-man
        4 7714 21774 21778 21787 21790 21794 21797 21800 21803 21806
21810 21814 21818 21822 21825 21829
=rectorat
        11354
=sim
        6307 42796
=special%20users
        3617
=stiinteaplicate
        5456
=student
        42813 42816 42819 42822 42825 42828 42831 42834 42837 42840
42843 42846 43443 43448 45718 52251
=systemaccounts
        3657
=test
        43368
=tet
        52249
=transporturi
        1751 55430
=useri2006
        71 3206 5916 9930 10840 15356 16119 17103 17387 19369 21808
55421 64891 64917 64919
=useri2007
        75 1998 2994 3482 5924 8042 8177 8286 8291 10742 11972 12185
18382 55422 55428
=useri2008
        77 1752 1858 1862 1954 3391 5865 9165 10301 10470 11540 16941
17133 55419 55426 55431 55433
=useri2009
        79 2220 5733 5856 5905 5940 8294 9131 10417 10871 16085 16587
18589 27227 55434
=useri2010
        5487 5547 6229 8449 8904 9704 9865 10357 10412 10580 10766
11402 16402 16580 18853 55425 55436
=useri2011
        305 3262 5467 8776 9111 9136 9288 9567 9958 10524 15711 15867
16583 17314 18793 55429
=useri2012
        6226 8531 9287 10518 10823 10845 11345 11346 11347 11348 11349
11350 11351 11352 11355 18366 55424 55437
=useri2013
        2144 3055 3093 3245 10843 18524 20378 21772 21776 21782 21785
21792 21812 21816 21820 55435
=useri2014
        27 2434 3226 3229 3500 6253 36065 36066 36067 36068 36069
36070 36071 36072 36073
=useri2015
        56062 56064 56068 56070 56072 56075 56079 56095 56135 56141
58638 58799 59159 60280 60368
=useri2016
        65594 65596 65598 65602 65604 65606 65609 65614 65617 65619
65624 65632 65635 65649 69725
=useri2017
        72417 72419 72421 72424 72426 72430 72437 72439 72443 72445
72451 72548 73242 73269 77024
=useri2018
        79401 79403 79405 79407 79409 79413 79417 79419 79421 79423
79429 79439 79443 79450 79460

On Wed, Jan 23, 2019 at 1:09 PM William Brown <wbrown@xxxxxxx> wrote:
>
>
>
> > On 23 Jan 2019, at 20:14, Mihai Carabas <mihai.carabas@xxxxxxxxx> wrote:
> >
> > I've tried playing with the filters on the ou=DPPD which has issues:
> > # extended LDIF
> > #
> > # LDAPv3
> > # base <ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro> with scope oneLevel
> > # filter: ou=Profeso
> > # requesting: ALL
> > #
> >
> > # search result
> > search: 2
> > result: 0 Success
> >
> > # numResponses: 1
> >
> > # extended LDIF
> > #
> > # LDAPv3
> > # base <ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro> with scope oneLevel
> > # filter: ou=Profesor
> > # requesting: ALL
> > #
> >
> > # Profesori, DPPD, People, curs.pub.ro
> > dn: ou=Profesori,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> > ou: Profesori
> > objectClass: top
> > objectClass: organizationalunit
> >
> > # Asistenti-Man, DPPD, People, curs.pub.ro
> > dn: ou=Asistenti-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> > objectClass: top
> > objectClass: organizationalunit
> > ou: ou=Asistenti-Man
> > ou: Asistenti-Man
> >
> > # Profesori-Man, DPPD, People, curs.pub.ro
> > dn: ou=Profesori-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> > objectClass: top
> > objectClass: organizationalunit
> > ou: ou=Profesori-Man
> > ou: Profesori-Man
> >
> > # Externi, DPPD, People, curs.pub.ro
> > dn: ou=Externi,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> > objectClass: top
> > objectClass: organizationalunit
> > ou: ou=Externi
> > ou: Externi
> >
> > # Auxiliari, DPPD, People, curs.pub.ro
> > dn: ou=Auxiliari,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> > objectClass: top
> > objectClass: organizationalunit
> > ou: Auxiliari
> >
> > # search result
> > search: 2
> > result: 0 Success
> >
> > # numResponses: 6
> > # numEntries: 5
> >
> > If I put a filter of ou=Profeso, no entry is returned which is _fine_.
> > If I put ou=Profesor, all the entries are returned (even no entry is
> > matching the string). Something is matching on all entries.
>
> This sounds like it could be an index corruption or issue perhaps. Would you be able to run a dbscan of:
>
> cd /var/lib/dirsrv/slapd-<instance name>/<backend name>
> dbscan -r -f ou.db4
>
> For me this is:
>
> cd /var/lib/dirsrv/slapd-localhost/userRoot
>
> It would be interesting to see if you have a result of “=Profeso” but not “=Profesor”
>
> Please do this first, but after this, the solution may be a db2index to rebuild your index content. I would like to see the dbscans first though :)
>
> Thanks,
>
>
> >
> > On Wed, Jan 23, 2019 at 9:06 AM Mihai Carabas <mihai.carabas@xxxxxxxxx> wrote:
> >>
> >> On Wed, Jan 23, 2019 at 4:52 AM William Brown <wbrown@xxxxxxx> wrote:
> >>>
> >>>
> >>>
> >>>> On 23 Jan 2019, at 02:01, Mihai Carabas <mihai.carabas@xxxxxxxxx> wrote:
> >>>>
> >>>> Helllo,
> >>>>
> >>>> On Tue, Jan 22, 2019 at 11:45 AM Ludwig <lkrispen@xxxxxxxxxx> wrote:
> >>>>>
> >>>>> The issue you are reporting does match exactly the issue in #49443, but
> >>>>> this was fixed and the fix is in current master. Also I cannot reproduce
> >>>>> it in current master and not with 1.4.20 -
> >>>>>
> >>>>> So this is a bit weird. Can you share a bit more of your data, eg
> >>>>> provide all entries below ou=DPPD dn and ou attribute, do you have an
> >>>>> index for ou ?
> >>>>
> >>>> Those are all _direct_ entries under ou=DPPD:
> >>>> # extended LDIF
> >>>> #
> >>>> # LDAPv3
> >>>> # base <ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro> with scope oneLevel
> >>>> # filter: (objectclass=*)
> >>>> # requesting: ALL
> >>>> #
> >>>>
> >>>> # Profesori, DPPD, People, curs.pub.ro
> >>>> dn: ou=Profesori,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>>> objectClass: top
> >>>> objectClass: organizationalunit
> >>>> ou: ou=Profesori
> >>>> ou: Profesori
> >>>>
> >>>> # Asistenti-Man, DPPD, People, curs.pub.ro
> >>>> dn: ou=Asistenti-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>>> objectClass: top
> >>>> objectClass: organizationalunit
> >>>> ou: ou=Asistenti-Man
> >>>> ou: Asistenti-Man
> >>>>
> >>>> # Profesori-Man, DPPD, People, curs.pub.ro
> >>>> dn: ou=Profesori-Man,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>>> objectClass: top
> >>>> objectClass: organizationalunit
> >>>> ou: ou=Profesori-Man
> >>>> ou: Profesori-Man
> >>>>
> >>>> # Externi, DPPD, People, curs.pub.ro
> >>>> dn: ou=Externi,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>>> objectClass: top
> >>>> objectClass: organizationalunit
> >>>> ou: ou=Externi
> >>>> ou: Externi
> >>>>
> >>>> # Auxiliari, DPPD, People, curs.pub.ro
> >>>> dn: ou=Auxiliari,ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro
> >>>> objectClass: top
> >>>> objectClass: organizationalunit
> >>>> ou: Auxiliari
> >>>>
> >>>> # search result
> >>>> search: 2
> >>>> result: 0 Success
> >>>>
> >>>> # numResponses: 6
> >>>> # numEntries: 5
> >>>>
> >>>>
> >>>> But for out=ACS, the filter is working:
> >>>> # extended LDIF
> >>>> #
> >>>> # LDAPv3
> >>>> # base <ou=ACS,ou=People,dc=curs,dc=pub,dc=ro> with scope oneLevel
> >>>> # filter: ou=Profesori
> >>>> # requesting: ALL
> >>>> #
> >>>>
> >>>> # Profesori, ACS, People, curs.pub.ro
> >>>> dn: ou=Profesori,ou=ACS,ou=People,dc=curs,dc=pub,dc=ro
> >>>> objectClass: top
> >>>> objectClass: organizationalunit
> >>>> ou: ou=Profesori
> >>>> ou: Profesori
> >>>>
> >>>> # search result
> >>>> search: 2
> >>>> result: 0 Success
> >>>>
> >>>> # numResponses: 2
> >>>> # numEntries: 1
> >>>>
> >>>> This is very wierd. I have an index for ou.
> >>>>
> >>>
> >>> This is indeed weird. Do you have the access log for this search operation? Can you please provide it?
> >>>
> >> [23/Jan/2019:09:01:00.759258088 +0200] conn=208222 fd=71 slot=71
> >> connection from 141.85.241.48 to 141.85.241.48
> >> [23/Jan/2019:09:01:00.759495689 +0200] conn=208222 op=0 BIND
> >> dn="cn=directory manager" method=128 version=3
> >> [23/Jan/2019:09:01:00.759638289 +0200] conn=208222 op=0 RESULT err=0
> >> tag=97 nentries=0 etime=0.0000258701 dn="cn=directory manager"
> >> [23/Jan/2019:09:01:00.760046290 +0200] conn=208222 op=1 SRCH
> >> base="ou=DPPD,ou=People,dc=curs,dc=pub,dc=ro" scope=1
> >> filter="(ou=Profesori)" attrs=ALL
> >> [23/Jan/2019:09:01:00.760605892 +0200] conn=208222 op=1 RESULT err=0
> >> tag=101 nentries=5 etime=0.0000696102
> >> [23/Jan/2019:09:01:00.761964296 +0200] conn=208222 op=2 UNBIND
> >> [23/Jan/2019:09:01:00.761988896 +0200] conn=208222 op=2 fd=71 closed - U1
> >>
> >>> Additionally, have you been able to reproduce this in a new instance? Or only on your “current” instance.
> >>>
> >> Honestly I did not.
> >>
> >> One particular thing is that I have upgraded my Fedora25 step-by-step
> >> (I went through each version) and also 389-ds was upgraded. The
> >> dataset would contain old metadata from the old version of 389-ds?
> >>
> >> Thank you,
> >> Mihai
> >>
> >>> Thanks,
> >>>
> >>>
> >>> —
> >>> Sincerely,
> >>>
> >>> William Brown
> >>> Software Engineer, 389 Directory Server
> >>> SUSE Labs
> >>> _______________________________________________
> >>> 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
> >>> To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
> >>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> >>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> >>> List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx
> > _______________________________________________
> > 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
> > To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx
>
>
> Sincerely,
>
> William Brown
> Software Engineer, 389 Directory Server
> SUSE Labs
> _______________________________________________
> 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx
_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux