Bug 2000060

Summary:	with base scope, ldapsearch on cn=compat,$SUFFIX does not return any entry
Product:	Red Hat Enterprise Linux 8	Reporter:	Florence Blanc-Renaud <frenaud>
Component:	slapi-nis	Assignee:	Alexander Bokovoy <abokovoy>
Status:	CLOSED ERRATA	QA Contact:	ipa-qe <ipa-qe>
Severity:	medium	Docs Contact:
Priority:	low
Version:	8.5	CC:	amore, ssidhaye, tbordaz
Target Milestone:	rc	Keywords:	Triaged, WorkAround
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	slapi-nis-0.60.0-1.module+el8.7.0+16405+581a7c1e	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-11-08 09:35:45 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Florence Blanc-Renaud 2021-09-01 09:44:55 UTC

Description of problem:
Using a base search on cn=compat,$SUFFIX does not return any entry although cn=compat,$SUFFIX exists.

# ldapsearch -LLL -o ldif-wrap=no -D cn=directory\ manager -w Secret123 -b cn=compat,dc=ipa,dc=test -s base
No such object (32)
Matched DN: dc=ipa,dc=test

# ldapsearch -LLL -o ldif-wrap=no -D cn=directory\ manager -w Secret123 -b cn=compat,dc=ipa,dc=test 
dn: cn=compat,dc=ipa,dc=test
objectClass: extensibleObject
cn: compat

dn: cn=users,cn=compat,dc=ipa,dc=test
objectClass: extensibleObject
cn: users
[...]

Version-Release number of selected component (if applicable):
# rpm -qa ipa-server slapi-nis
ipa-server-4.9.6-4.module+el8.5.0+11912+1b4496cf.x86_64
slapi-nis-0.56.6-3.module+el8.5.0+11645+9d3a3007.x86_64


How reproducible:
Always

Steps to Reproduce:
1. ldapsearch -LLL -o ldif-wrap=no -D cn=directory\ manager -w Secret123 -b cn=compat,dc=ipa,dc=test -s base

Actual results:
No such object

Expected results:
dn: cn=compat,dc=ipa,dc=test
objectClass: extensibleObject
cn: compat

Additional info:
This is similar to BZ 1958909, where a base search on cn=admins,cn=groups,cn=compat,dc=example,dc=com did not return anything but which got fixed.
The fix apparently was not complete: base search with baseDNs below cn=compat,$SUFFIX now work as expected but base search directly on cn=compat,$SUFFIX still don't return any entry.

Comment 1 Florence Blanc-Renaud 2021-09-02 07:19:01 UTC

@tbordaz Could you have a look at the issue? Thx

Comment 4 Alexander Bokovoy 2022-08-21 05:39:53 UTC

Should be addressed with slapi-nis 0.60.0 release.

Comment 5 anuja 2022-08-23 14:10:33 UTC

Verified Using :

[root@master ~]# ldapsearch -LLL -o ldif-wrap=no -D cn=directory\ manager -w Secret123 -b cn=compat,dc=ipa,dc=test -s base
dn: cn=compat,dc=ipa,dc=test
objectClass: extensibleObject
cn: compat

[root@master ~]# rpm -qa ipa-server slapi-nis
slapi-nis-0.60.0-1.module+el8.7.0+16405+581a7c1e.x86_64
ipa-server-4.9.10-6.module+el8.7.0+16405+581a7c1e.x86_64
[root@master ~]#

Comment 8 anuja 2022-08-29 05:17:15 UTC

Verified using nightly build:

[root@master ~]# ldapsearch -LLL -o ldif-wrap=no -D cn=directory\ manager -w Secret123 -b cn=compat,dc=ipa,dc=test -s base
dn: cn=compat,dc=ipa,dc=test
objectClass: extensibleObject
cn: compat

[root@master ~]# rpm -qa ipa-server slapi-nis
slapi-nis-0.60.0-1.module+el8.7.0+16405+581a7c1e.x86_64
ipa-server-4.9.10-6.module+el8.7.0+16405+581a7c1e.x86_64
[root@master ~]#

Comment 10 errata-xmlrpc 2022-11-08 09:35:45 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (idm:client and idm:DL1 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:7540