[python-ldap] Possible bug of MOD_DELETE with OpenBSD ldapd as LDAP server

Michael Ströder michael at stroeder.com
Wed May 18 17:22:50 EDT 2016

On 2016-05-17 06:31, Zhang Huangbin wrote:
> I run OpenBSD 5.9 (amd64) and its built-in ldapd[1] daemon as LDAP
> server. Let's say i have one ldap object with attribute/values like
> this:
> dn: ...
> enabledService: abc
> enabledService: def
> enabledService: ghi
> enabledService: jkl
> I run code below to delete just "enabledService=abc":
> conn.modify_s(dn, [(ldap.MOD_DELETE, 'enabledService', 'abc')])
> It deletes all enabledService (this is not expected). Same code works
> fine with OpenLDAP.
> Is it a python-ldap issue or OpenBSD ldapd daemon?

To me this sounds like a bug in OpenBSD ldapd daemon.

Ciao, Michael.

More information about the python-ldap mailing list