LDAP compare on 389 DirectoryServer fails

Environment

HPCC and 389DS LDAP

Description

Using 389DirectioryServer, when determining whether or not a user is a member of a group (user/MemberOf), the security manager calls ldap_compare_ext_s. However, this call is returning -3, which is not a valid LDAP return code. Calls to GetLastError return 0, meaning there was no error. This causes us to report that the user is not a member of any groups. Interestingly, calls to query all members of a given group work fine, so there is a work around.

Conclusion

None

Activity

Show:

Russ Whitehead February 17, 2016 at 3:21 PM

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Components

Assignee

Reporter

Priority

Fix versions

Created September 1, 2015 at 7:11 PM
Updated February 17, 2016 at 5:15 PM
Resolved February 17, 2016 at 5:15 PM