ldbsearch on a link attribute hints that an object used to have this link

Andrew Bartlett abartlet at samba.org
Mon Apr 26 16:08:11 MDT 2010


On Thu, 2010-04-22 at 18:10 +0400, Matthieu Patou wrote:
> Hello all,
> 
> When doing ldbsearch -H sam.ldb '(member=*)' member
> 
> I have some object returned even if they do not have this attribute, if 
> fact i'm pretty sure that this kind of query will return the objects 
> that have or used to have the attribute member.
> 
> I don't know if it's a real problem or not but we should not expose this 
> too much no ?

Yeah - what's going on here is that the lower level of LDB where this
match expression is evaluated has the member attributes, but they are
deleted.  We need to re-evaluate after we have hidden the deleted
attributes.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100427/15bff689/attachment.pgp>


More information about the samba-technical mailing list