Apache DS ignores attrsonly

Michael Ströder michael at stroeder.com
Mon Jul 13 13:23:26 CEST 2009

Thorsten Kampe wrote:
> It does work against eDirectory and Active Directory (as mentioned). 

...and OpenLDAP. So the likelihood is very high that python-ldap does
not have a bug.

> "ldapsearch -A" also works against Apache DS. The question is still: is 
> that a Python-LDAP or Apache DS bug?

It's a ApacheDS bug.

> Could you install Apache Directory Server or Apache Directory Studio? 

Hmm, you're very generous with my spare time.

> Both allow you to create that directory that I queried in about one 
> minute.

I did and watching the LDAP traffic with Wireshark shows that ApacheDS
returns the attribute values although searchRequest::typesOnly is True
on the wire. In opposite to that OpenLDAP's slapd does not return any
attribute values in this case.

I suspect ldapsearch -A also changes the way how found entries are

Please next time use Wireshark to track things down.

Ciao, Michael.

More information about the python-ldap mailing list