[python-ldap] Possible bug of MOD_DELETE with OpenBSD ldapd as LDAP server

Michael Ströder michael at stroeder.com
Wed May 18 17:22:50 EDT 2016


On 2016-05-17 06:31, Zhang Huangbin wrote:
> I run OpenBSD 5.9 (amd64) and its built-in ldapd[1] daemon as LDAP
> server. Let's say i have one ldap object with attribute/values like
> this:
> 
> dn: ...
> enabledService: abc
> enabledService: def
> enabledService: ghi
> enabledService: jkl
> 
> I run code below to delete just "enabledService=abc":
> 
> conn.modify_s(dn, [(ldap.MOD_DELETE, 'enabledService', 'abc')])
> 
> It deletes all enabledService (this is not expected). Same code works
> fine with OpenLDAP.
> Is it a python-ldap issue or OpenBSD ldapd daemon?

To me this sounds like a bug in OpenBSD ldapd daemon.

Ciao, Michael.


More information about the python-ldap mailing list