Hello,

we are using Netware 6.5SP5 with edir 8.7.3.7. I would like to implement
iprint with contextless login, but it does not work. It works when the
user logs in with the complete name including context etc.

My ipp.conf is configured like this:

AuthLDAPURL "ldap://fhwiwi2.fh-bielefeld.de/O=FHBI???(objectClass=user)"

When i try to login only with the login name the dstrace console shows
the following:
DSTRACE SCREEN:
(195.37.227.137:1090)(0x000f:0x63) Search request:

base: "o=FHBI"

scope:2 dereference:3 sizelimit:0 timelimit:0 attrsonly:0

filter: "(&(objectClass=user)(uid=tdegenhardt))"

no attributes

(195.37.227.137:1090)(0x000f:0x63) Empty attribute list implies all user
attributes

(195.37.227.137:1090)(0x000f:0x63) Sending search result entry
"cn=tdegenhardt,ou=FB5,ou=MA,o=FHBI" to connection 0x949a3460

(195.37.227.137:1090)(0x000f:0x63) Sending search result entry
"cn=tdegenhardt,ou=FB5,ou=MA,o=FHBI" to connection 0x949a3460

(195.37.227.137:1090)(0x000f:0x63) Sending operation result 0:"":"" to
connection 0x949a3460

The server seems to send two search results with the same user.
The error_log from apache2 shows this:

[Fri Jan 26 09:22:17 2007] [warn] [client 193.174.151.90] [10]
auth_ldapdn authenticate: user tdegenhardt authentication failed; URI
/ipps/pr_uhg-fb5-laser-a3_iprint-fhwi [User is not unique (search found
two or more matches)][No such object]
[Fri Jan 26 09:22:17 2007] [error] [client 193.174.151.90] no acceptable
variant: SYS:/Apache2/error/HTTP_UNAUTHORIZED.html.var

But there is definetely no duplicate entry.


When i log in with full context its working:

DSTRACE:
(195.37.227.137:1093)(0x0007:0x63) Search request:

base: "CN=tdegenhardt,OU=fb5,OU=ma,O=fhbi"

scope:0 dereference:3 sizelimit:0 timelimit:0 attrsonly:0

filter: "(objectClass=user)"

no attributes

(195.37.227.137:1093)(0x0007:0x63) Empty attribute list implies all user
attributes

(195.37.227.137:1093)(0x0007:0x63) Sending search result entry
"cn=tdegenhardt,ou=FB5,ou=MA,o=FHBI" to connection 0x94b00460

(195.37.227.137:1093)(0x0007:0x63) Sending operation result 0:"":"" to
connection 0x94b00460

(195.37.227.137:1093)(0x0008:0x60) DoBind on connection 0x94b00460

(195.37.227.137:1093)(0x0008:0x60) Bind
name:cn=tdegenhardt,ou=FB5,ou=MA,o=FHBI,
version:3, authentication:simple

(195.37.227.137:1093)(0x0008:0x60) Sending operation result 0:"":"" to
connection 0x94b00460


The server sends only one search result.
Any help would be appreciated.

Kind regards,
Thomas