Base="" sub search in DSEE and OpenLdap & SLAPI_PLUGIN_PRE_SEARCH_FN troubl

Question

I'm trying to migrate some application from using OpenLdap as user information repositorium, to Sun Directory Server 6.2.
The suffixes layout in OpenLdap looks like this:
rootDSE
     |
     | - cn=app_configuration
     | - dc=com
     |          | - dc=somedomain
     |                           | - (some users accounts here)
     | - dc=net
     |           | - dc=someotherdomain
     |                                | - (some users accounts here)
        ......... (and so on)Problem - when user try to login in application, it's using ldap search like this "ldapsearch -b "" -s sub (uid=loginname)"
Which is working perfeclty fine with openldap:
[sady@sady-lin bin]$ ./ldapsearch -b '' -x -s sub '(objectclass=*)' dn
# extended LDIF
# LDAPv3
# base <> with scope subtree
# filter: (objectclass=*)
# requesting: dn
# ru
dn: dc=ru
# admin, people, sady-lin.energo.ru
dn: uid=admin,ou=people,dc=sady-lin,dc=energo,dc=ru
# com
dn: dc=com
# wiki, people, nwenergo.com
dn: uid=wiki,ou=people,dc=nwenergo,dc=com
# search result
search: 2
result: 0 Success
# numResponses: 23
# numEntries: 22As you can see, all uid entries in all domains are finded.
But in DSEE rootDSE don't follow SUB search, and with base dn equal "" you can see only base dn itself:
[root@ch0-bl1 ~]# ldapsearch -D 'cn=directory manager' -w 12345678 -b '' -s sub  '(objectclass=*)'
ldap_search: No such object
[root@ch0-bl1 ~]# ldapsearch -D 'cn=directory manager' -w 12345678 -b '' -s base  '(objectclass=*)'
version: 1
dn:
objectClass: top
namingContexts: dc=com
namingContexts: dc=leivo,dc=r
namingContexts: dc=ru
namingContexts: o=comms-config
namingContexts: o=pab
namingContexts: o=PiServerDb
.....I tryed to use Directory Proxy Server, to resolv this issue, but with no result.
I created ldap-data-view with base-dn:"" and dn-mapping-source-base-dn:"dc=ru" (for example). but when i search throu Proxy, it isn't do the mapping:
[16/May/2009:13:03:20 +0400] - OPERATION  - INFO  - conn=225 op=1 msgid=2 SEARCH base="" scope=2 filter="(objectclass=*)" attrs="*"
[16/May/2009:13:03:20 +0400] - OPERATION  - INFO  - conn=225 op=1 SEARCH RESPONSE err=0 msg="" nentries=0 etime=0Here is my ldap-data-view props:
[root@ch0-bl1 examples]# dpconf get-ldap-data-view-prop -p 1389 -w /tmp/pass myds2-view
alternate-search-base-dn                    :  dc=com 
alternate-search-base-dn                    :  dc=ru 
attr-name-mappings                          :  none 
base-dn                                     :  "" 
contains-shared-entries                     :  false 
custom-distribution-algorithm               :  none 
description                                 :  - 
distribution-algorithm                      :  none 
dn-join-rule                                :  none 
dn-mapping-attrs                            :  none 
dn-mapping-source-base-dn                   :  dc=ru 
excluded-subtrees                           :  dc=com 
filter-join-rule                            :  none 
is-enabled                                  :  true 
is-read-only                                :  false 
is-routable                                 :  true 
ldap-data-source-pool                       :  myds1-pool 
lexicographic-attrs                         :  all 
lexicographic-lower-bound                   :  none 
lexicographic-upper-bound                   :  none 
non-viewable-attr                           :  none 
non-writable-attr                           :  none 
numeric-attrs                               :  all 
numeric-default-data-view                   :  false 
numeric-lower-bound                         :  none 
numeric-upper-bound                         :  none 
pattern-matching-base-object-search-filter  :  all 
pattern-matching-dn-regular-expression      :  all 
pattern-matching-one-level-search-filter    :  all 
pattern-matching-subtree-search-filter      :  all 
process-bind                                :  - 
replication-role                            :  master 
viewable-attr                               :  all except non-viewable-attr 
writable-attr                               :  all except non-writable-attr  It do mapping perfectly fine, with dc=com, switched for dc=ru,
with this ldap-view parameters:
base-dn                                     :  dc=com 
dn-mapping-source-base-dn                   :  dc=ru  Log will be:
[16/May/2009:13:07:32 +0400] - OPERATION  - INFO  - conn=229 op=1 msgid=2 SEARCH base="dc=com" scope=2 filter="(objectclass=*)" attrs="*"
[16/May/2009:13:07:32 +0400] - SERVER_OP  - INFO  - conn=229 op=1 SEARCH base="dc=ru" scope=2 filter="(objectclass=*)" attrs="*" s_msgid=5 s_conn=myds1:131and ldapsearch will return all entries in dc=ru domain.
It's interesting, that when i'm search with base-dn="dc=ru", witch is only routed with Proxy trou my ldap-view with base-dn="", log output looks like this:
[16/May/2009:13:07:27 +0400] - OPERATION  - INFO  - conn=228 op=1 msgid=2 SEARCH base="dc=ru" scope=2 filter="(objectclass=*)" attrs="*"
[16/May/2009:13:07:27 +0400] - SERVER_OP  - INFO  - conn=228 op=1 SEARCH base=",dc=ru" scope=2 filter="(objectclass=*)" attrs="*" s_msgid=5 s_conn=myds1:132
[16/May/2009:13:07:27 +0400] - SERVER_OP  - INFO  - conn=228 op=1 SEARCH RESPONSE err=34 msg="Invalid DN" nentries=0 s_conn=myds1:132
[16/May/2009:13:07:27 +0400] - OPERATION  - INFO  - conn=228 op=1 SEARCH RESPONSE err=34 msg="Invalid DN" nentries=0 etime=0You can see that base="dc=ru" have been mapped to base=",dc=ru" (with , )

Answer 1

/* Break down and log information about the search request.       */
int
rootdsesub(Slapi_PBlock * pb)
    char          *  base       = NULL;/* Base DN for search      */
    int              scope;            /* Base, 1 level, subtree  */
    int              connId, opId, rc = 0;
    long             msgId;
   // char        *  index      = "";
    char          *  indexes[]  = {"dc=ru","dc=com"};
    char          *  filter     = "";
    char          *  attrs[]    = {"",NULL};
    int              attrsonly  = 0;
    Slapi_PBlock  *  search_pb  = NULL;
    int              ind_cnt    = 2;
    int              i          = 0;
    rc |= slapi_pblock_get(pb, SLAPI_OPERATION_MSGID,  &msgId);
    rc |= slapi_pblock_get(pb, SLAPI_CONN_ID,          &connId);
    rc |= slapi_pblock_get(pb, SLAPI_OPERATION_ID,     &opId);
    if (rc == 0) {
        LOG1("*** PREOPERATION SEARCH PLUG-IN - START ***\n");
    } else {
        return (rc);
    /* Log base DN and scope for search. */
    rc |= slapi_pblock_get(pb, SLAPI_SEARCH_TARGET,    &base);
    rc |= slapi_pblock_get(pb, SLAPI_SEARCH_SCOPE,     &scope);
    if (rc == 0) {
        if (scope == LDAP_SCOPE_SUBTREE && strcmp( base, "" )==0 )
                        rc |= slapi_pblock_set(pb, SLAPI_SEARCH_TARGET, "dc=ru");
                        rc |= slapi_pblock_get(pb, SLAPI_SEARCH_STRFILTER,      &filter);
                        rc |= slapi_pblock_get(pb, SLAPI_SEARCH_ATTRS,          &attrs);
                        rc |= slapi_pblock_get(pb, SLAPI_SEARCH_ATTRSONLY,      &attrsonly);
                        LOG2("Target DN:%s\n", base);
                        LOG2("filter:%s\n", filter);
                        //filter = "uid=sady";
                        LOG2("filter:%s\n", filter);
                        LOG2("attrs[0]:%s\n", attrs[0]);
                //      attrs[0]="uid";
                        LOG2("attrsonly:%d\n", attrsonly);
                        search_pb = slapi_pblock_new();
                        if (search_pb == NULL ) return 1;
        LOG1("new pb\n");
        for ( i=0; i<ind_cnt; i++)
        LOG3("indexes[%d]=%s\n",i,indexes);
rc = slapi_search_internal_set_pb(
search_pb,
indexes[i], /* Base DN for search */
LDAP_SCOPE_SUBTREE, /* Scope */
filter, /* Filter */
attrs, /* Set to get all user attrs. */
attrsonly, /* Return attrs. and values */
NULL, /* No controls */
NULL, /* DN rather than unique ID */
plugin_id,
SLAPI_OP_FLAG_NEVER_CHAIN /* Never chain this operation. */
LOG1("set pb\n");
rc |= slapi_search_internal_callback_pb(search_pb, pb,NULL, rootdse_send,NULL);
LOG1("search inter call pb\n");
slapi_pblock_get(search_pb, SLAPI_PLUGIN_INTOP_RESULT, &rc);
if (rc != LDAP_SUCCESS) { LOG1("NOT SUCCESS\n");slapi_pblock_destroy(search_pb);return -1;}
LOG1("get pb result\n");
slapi_free_search_results_internal(search_pb);
LOG1("clean memory\n");
slapi_pblock_destroy(search_pb);
LOG1("clean memory\n");
slapi_send_ldap_result(pb, 0, NULL, NULL, 1, NULL);
LOG1("send ldap result \n");
} else {
return (rc);
LOG1("*** PREOPERATION SEARCH PLUG-IN - END ***\n");
return (rc);
/* Register the plug-in with the server. */
#ifdef _WIN32
__declspec(dllexport)
#endif
int
rootdse_sub_init(Slapi_PBlock * pb)
int rc = 0; /* 0 means success */
rc |= slapi_pblock_set( /* Plug-in API version */
pb,
SLAPI_PLUGIN_VERSION,
SLAPI_PLUGIN_CURRENT_VERSION
rc |= slapi_pblock_set( /* Plug-in description */
pb,
SLAPI_PLUGIN_DESCRIPTION,
(void *) &preop_desc
rc |= slapi_pblock_set( /* Startup function */
pb,
SLAPI_PLUGIN_PRE_RESULT_FN,
//SLAPI_PLUGIN_POST_SEARCH_FN,
(void *) rootdsesub
rc |= slapi_pblock_get(pb, SLAPI_PLUGIN_IDENTITY, &plugin_id);
return (rc);