ldap search fails - ReadList.com

11 msg	(noob-newbie here) Configuring postfix to be us...
5 msg	(No Subject)
3 msg	When is 'for <recipient>'present in header?
2 msg	client does not detect mail
11 msg	Empty MAIL FROM
3 msg	Change format of emails in active directory
3 msg	Logging a message from within a restriction list
4 msg	mailbox_transport_maps lookup key
10 msg	mailbox_transport_maps problem
5 msg	Default value of unknown_address_reject_code
9 msg	Issue with using LDAP for transport maps
4 msg	limit max. used bandwith?
2 msg	maximum number of smtpd_restriction_classes
5 msg	'transport_maps' getting ignored?
3 msg	Server configuration problem
6 msg	smtpd_sasl_auth_enable is true, but SASL suppor...
3 msg	Mail to local domains
2 msg	nonexistent virtual account received
13 msg	How to make postfix use one IP for receiving an...

ldap search fails
\ Bernhard D Rohrer (13 Apr 2007)
. \ jeff donovan (13 Apr 2007)
. . \ Bernhard D Rohrer (14 Apr 2007)

Subject:	ldap search fails
Group:	Postfix-users
From:	Bernhard D Rohrer
Date:	13 Apr 2007

Hi Folks

I am using ldap to find the delivery mailboxes for postfix, but this
fails at the moment:

I am trying to find the mailbox name for which I am using the uid from
the email address which is stored in mail.

postfix config reads like this:

server_host = 127.0.0.1
server_port = 389
search_base = ou=users,dc=domain,dc=net
scope = sub
timeout = 30
bind = yes
bind_dn = cn=postfix,ou=system,ou=users,dc=domain,dc=net
bind_pw = xxxxxxxxxxxxxx
version = 3
start_tls = no
query_filter = mail=%s
result_attribute = uid

syslog tells me this:

Apr 13 02:59:39 collab slapd[19224]: conn=1 op=1 SRCH
base="ou=users,dc=domain,dc=net" scope=2 deref=0
filter="(|(mail=user))"
Apr 13 02:59:39 collab slapd[19224]: conn=1 op=1 SRCH
attr=mailForwardingAddress
Apr 13 02:59:39 collab slapd[19224]: ==> limits_get: conn=1 op=1
dn="cn=postfix,ou=system,ou=users,dc=domain,dc=net"
Apr 13 02:59:39 collab slapd[19224]: => bdb_search
Apr 13 02:59:39 collab slapd[19224]:
bdb_dn2entry("ou=users,dc=domain,dc=net")
Apr 13 02:59:39 collab slapd[19224]: search_candidates:
base="ou=users,dc=domain,dc=net" (0x00000006) scope=2
Apr 13 02:59:39 collab slapd[19224]: => bdb_dn2idl(
"ou=users,dc=domain,dc=net" )
Apr 13 02:59:39 collab slapd[19224]: <= bdb_dn2idl: id=11 first=6 last=57
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IAND
Apr 13 02:59:39 collab slapd[19224]: => bdb_list_candidates 0xa0
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IOR
Apr 13 02:59:39 collab slapd[19224]: => bdb_list_candidates 0xa1
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IEQUALITY
Apr 13 02:59:39 collab slapd[19224]: => bdb_equality_candidates
(objectClass)
Apr 13 02:59:39 collab slapd[19224]: => key_read
Apr 13 02:59:39 collab slapd[19224]: <= bdb_index_read: failed (-30990)
Apr 13 02:59:39 collab slapd[19224]: <= bdb_equality_candidates: id=0,
first=0, last=0
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=0
first=0 last=0
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IOR
Apr 13 02:59:39 collab slapd[19224]: => bdb_list_candidates 0xa1
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IEQUALITY
Apr 13 02:59:39 collab slapd[19224]: => bdb_equality_candidates (mail)
Apr 13 02:59:39 collab slapd[19224]: => key_read
Apr 13 02:59:39 collab slapd[19224]: <= bdb_index_read 1 candidates
Apr 13 02:59:39 collab slapd[19224]: <= bdb_equality_candidates: id=1,
first=13, last=13
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=1
first=13 last=13
Apr 13 02:59:39 collab slapd[19224]: => bdb_filter_candidates
Apr 13 02:59:39 collab slapd[19224]: ^IEQUALITY
Apr 13 02:59:39 collab slapd[19224]: => bdb_equality_candidates
(mozillaSecondEmail)
Apr 13 02:59:39 collab slapd[19224]: <= bdb_equality_candidates:
(mozillaSecondEmail) index_param failed (18)
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_list_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_list_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=-1
first=1 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_list_candidates: id=11
first=6 last=57
Apr 13 02:59:39 collab slapd[19224]: <= bdb_filter_candidates: id=11
first=6 last=57
Apr 13 02:59:39 collab slapd[19224]: bdb_search_candidates: id=11
first=6 last=57
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 6 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 6
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 6
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 6
Apr 13 02:59:39 collab slapd[19224]: => send_search_entry:
dn="uid=user,ou=users,dc=domain,dc=net"
Apr 13 02:59:39 collab slapd[19224]: conn=1 op=1 ENTRY
dn="uid=user,ou=users,dc=domain,dc=net"
Apr 13 02:59:39 collab slapd[19224]: <= send_search_entry
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 17 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 18 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 19 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 20 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 21 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 24 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 35 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 36 does not match filter
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: OR
Apr 13 02:59:39 collab slapd[19224]: => test_filter_or
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: => test_filter
Apr 13 02:59:39 collab slapd[19224]: EQUALITY
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter_or 5
Apr 13 02:59:39 collab slapd[19224]: <= test_filter 5
Apr 13 02:59:39 collab slapd[19224]: bdb_search: 57 does not match filter
Apr 13 02:59:39 collab slapd[19224]: send_ldap_result: conn=1 op=1 p=3
Apr 13 02:59:39 collab slapd[19224]: send_ldap_response: msgid=2 tag=101
err=0
Apr 13 02:59:39 collab slapd[19224]: conn=1 op=1 SEARCH RESULT tag=101
err=0 nentries=1 text=
Apr 13 02:59:39 collab slapd[19224]: connection_get(15): got connid=1
Apr 13 02:59:39 collab slapd[19224]: connection_read(15): checking for
input on id=1
Apr 13 02:59:39 collab slapd[19224]: ber_get_next on fd 15 failed
errno=11 (Resource temporarily unavailable)

I have indexed the following fields in slapd.conf:

# Indexing options for database #1
index objectClass eq
index mail pres,eq,sub
index uid pres,eq,sub
index cn,sn pres,eq,sub

the ldif for the user it is trying to find is (suitably edited):

dn: uid=user,ou=users,dc=domain,dc=net
c: IE
gidNumber: 10
mail: user
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: mozillaAbPersonAlpha
uid: user
uidNumber: 15
userPassword: xxxxxxxxxxxxxxxxxxxxxxxxxx

to add insult to injury a manual

ldapsearch -x -D cn=admin,dc=domain,dc=net -w xxxxxxx -H
ldap://localhost mail=user

returns the correct record

cheers

Bernhard
--
Graylion's Fetish & Fashion Store
Goth and Kinky Boots, Clothing and Jewellery
http://www.graylion.net