From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Filipp Gunbin Newsgroups: gmane.emacs.bugs Subject: bug#58605: 29.0.50; Commit 2a2f5530fa2 breaks ldap-search-internal Date: Tue, 25 Oct 2022 16:12:21 +0300 Message-ID: References: <87wn8xr7i6.fsf@wi.uni-muenster.de> <86fsfidgyr.fsf@mail.linkov.net> <87ilkd7kww.fsf@wi.uni-muenster.de> <874jvwp51w.fsf@wi.uni-muenster.de> <87zgdkih0f.fsf@wi.uni-muenster.de> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="9426"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Cc: 58605@debbugs.gnu.org, Juri Linkov To: Jens Lechtenboerger Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Tue Oct 25 15:15:41 2022 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1onJmO-0002Fe-5w for geb-bug-gnu-emacs@m.gmane-mx.org; Tue, 25 Oct 2022 15:15:41 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1onJk9-0003gW-1q; Tue, 25 Oct 2022 09:13:21 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1onJjq-0003Mo-Vu for bug-gnu-emacs@gnu.org; Tue, 25 Oct 2022 09:13:05 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1onJjp-0007p1-TQ for bug-gnu-emacs@gnu.org; Tue, 25 Oct 2022 09:13:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1onJjp-0006rK-I6 for bug-gnu-emacs@gnu.org; Tue, 25 Oct 2022 09:13:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Filipp Gunbin Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 25 Oct 2022 13:13:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 58605 X-GNU-PR-Package: emacs Original-Received: via spool by 58605-submit@debbugs.gnu.org id=B58605.166670355726331 (code B ref 58605); Tue, 25 Oct 2022 13:13:01 +0000 Original-Received: (at 58605) by debbugs.gnu.org; 25 Oct 2022 13:12:37 +0000 Original-Received: from localhost ([127.0.0.1]:50678 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1onJjO-0006qZ-RQ for submit@debbugs.gnu.org; Tue, 25 Oct 2022 09:12:37 -0400 Original-Received: from out1-smtp.messagingengine.com ([66.111.4.25]:33583) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1onJjL-0006qH-Mw for 58605@debbugs.gnu.org; Tue, 25 Oct 2022 09:12:34 -0400 Original-Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 2627F5C00B7; Tue, 25 Oct 2022 09:12:26 -0400 (EDT) Original-Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Tue, 25 Oct 2022 09:12:26 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.fm; h= cc:cc:content-type:date:date:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:sender:subject :subject:to:to; s=fm3; t=1666703546; x=1666789946; bh=07EfbdLpkP o82OhIlFZSwYadymDn/scLhJ20q72ZssM=; b=U4pmTuCNiSxllmdrmBVToV7w7R VVRCxXER1/fujXLz79YwdxwJ7oVLXEh6doEZmD6g2bUMon+QBzISYK2ig6gOUyJy 79/Rs6sFKIg/kqbqGuOZkyzHiT7WlWBmiFMFw+7BiNC0lbK0DGRDUWQ0S2yquWkg 1lO7F0gRedFAMXDN8qU8SBnu3PfLvWw1czkMiwwSZKaiHoVdw5pQCz/thAhnL+6i 6u8f3atXKvys5hTsoN4G/lxMu0eJViCyfrqqD2jy3rz6MAgLMRrqNHdfBxsHXujR qFCfoq+S7jcaaiW3M94FfOSjGQKpDQ0HkDqOjynRwOooBzGi5k4IPpEcSZ+Q== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:date:date:feedback-id :feedback-id:from:from:in-reply-to:in-reply-to:message-id :mime-version:references:reply-to:sender:subject:subject:to:to :x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1666703546; x=1666789946; bh=07EfbdLpkPo82OhIlFZSwYadymDn /scLhJ20q72ZssM=; b=ln4Of2PELJKKJrFqou15eX43wOWIKRhHGfL0cK4hax7Y ToKrYdHpgqEG/R2CraA9sJdPNInz5CgePKiwtxoILlgot1g/SKYTQIyh0CNlM4wk wwkuAVPay9cv28OuHTtPufu0xfgMaUAQpQrDiDB7OcmsTd4yH3m1i9jbJibFhVG/ D0JoKbXmoUWdrG+JHm58qkebd2fR5nlQbYhamEWottD0DClRVTDz39gttz0Lf+/f k4MR/Tz4/j+436xFNcOW+wYWQnB2vC39O0W6QwcvuVfl+wxXgG1dQGVJf4lxEiRE Xrgp+XRF5kdaNWwZj30qiZzFTrDEn/3AfRRLiOeQBQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvgedrtddtgdeffecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpefhvfevufgjfhgffffkgggtsehttdertddtredtnecuhfhrohhmpefhihhlihhp phcuifhunhgsihhnuceofhhguhhnsghinhesfhgrshhtmhgrihhlrdhfmheqnecuggftrf grthhtvghrnhepjeetjefhtddvieejkeevheelgfevfeeuiedtfeeileffffefffffgfeg veegjeetnecuffhomhgrihhnpegvgigrmhhplhgvrdhorhhgnecuvehluhhsthgvrhfuih iivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepfhhguhhnsghinhesfhgrshhtmhgr ihhlrdhfmh X-ME-Proxy: Feedback-ID: id48c41f1:Fastmail Original-Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 25 Oct 2022 09:12:24 -0400 (EDT) In-Reply-To: <87zgdkih0f.fsf@wi.uni-muenster.de> (Jens Lechtenboerger's message of "Tue, 25 Oct 2022 07:55:44 +0200") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: "bug-gnu-emacs" Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:246147 Archived-At: Hi Jens, On 25/10/2022 07:55 +0200, Jens Lechtenboerger wrote: > Hi there! > > On 2022-10-24, Filipp Gunbin wrote: > >> [...] >> But ldap-search expects ldap-ldapsearch-args to be at least what default >> value is, to be able to parse the output (btw, "-LL" was there since >> "forever", which is 20 years in this case; it's just the third L which >> was added recently, to exclude ldif version from the output). > > How should users know about that expectation? As I wrote, there should be no need to use it at all. >> Also, default value can change along with ldap-search internal >> changes. So if you want to let-bind it, you should merge in your >> additional args, not replace them. > > If the code requires this, it might separate the necessary arguments > from the customizable ones. It does - via ldap-host-parameters-alist. >> However, I don't see why you would want to let-bind it: >> >> - -H: Why don't you use host parameter? >> - -x: just pass 'auth = simple >> - -tt: already in ldap-ldapsearch-args > > When I started using LDAP, I could not make ldapsearch to use > encrypted connections without -H. That may have changed since > then... Yeah, commit 0b4e003766f15225dede9bdba4ead33e493856e2 (June 2019) adds support for LDAP URIs. On a side note, OpenLDAP recently removed `-h' from ldapsearch altogether. >> Even more, I'd say that the user should set ldap-host-parameters-alist >> according to his/her setup, and you should not mess with ldapsearch >> arguments at all. Like: >> >> (setq ldap-host-parameters-alist >> '(("ldap://example.org" >> auth simple >> auth-source t))) >> >> Then just invoke: >> >> (ldap-search "mail=.." "ldap://example.org" '("userCertificate")) > > Does this result in encrypted connections? It should work with ldaps:// as well. I'm now closing this issue, feel free to reopen or create new if needed. Filipp