Ubuntu
openldap package

  1. Bug #1023025
  2. Comment #8

Comment 8 for bug 1023025

Revision history for this message
cswingle (cswingle) wrote : Re: search fail with get_ctrls : controls require LDAPv3

I can also reproduce this issue with the same ldapsearch, except I get a failure about half the time (this is with the daemon versions of lib(pam|nss)-ldapd):

$ ldapsearch -h localhost -b ou=people,dc=company,dc=com -x "(&(&(objectClass=posixAccount)(uid=*))(uid=cswingley))" -M -v
ldap_initialize( ldap://localhost )
filter: (&(&(objectClass=posixAccount)(uid=*))(uid=cswingley))
requesting: All userApplication attributes
# extended LDIF
#
# LDAPv3
# base <ou=people,dc=company,dc=com> with scope subtree
# filter: (&(&(objectClass=posixAccount)(uid=*))(uid=cswingley))
# requesting: ALL
# with manageDSAit control
#

# search result
search: 2
result: 2 Protocol error
text: controls require LDAPv3

# numResponses: 1

I tried rebuilding 'nss-pam-ldapd' from the latest upstream sources (0.8.10), copying the debian directory over from the 12.04 src package and modifying the changelog, and the problem is still there, so it doesn't seem to be an issue that was fixed in upstream.