Bug#543325: exim4-daemon-heavy: ldap lookup with multiple filter statement failed

[Tamas Bagyal]

Subject: exim4-daemon-heavy: ldap lookup with multiple filter statement failed
Package: exim4-daemon-heavy
Version: 4.69-9
Severity: normal



-- Package-specific info:
Exim version 4.69 #1 built 30-Sep-2008 18:26:44
Copyright (c) University of Cambridge 2006
Berkeley DB: Berkeley DB 4.6.21: (September 27, 2007)
Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS 
move_frozen_messages Content_Scanning Old_Demime
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch 
ldap ldapdn ldapm mysql nis nis0 passwd pgsql sqlite
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Size of off_t: 8
Configuration file is /var/lib/exim4/config.autogenerated
# /etc/exim4/update-exim4.conf.conf
#
# Edit this file and /etc/mailname by hand and execute update-exim4.conf
# yourself or use 'dpkg-reconfigure exim4-config'

dc_eximconfig_configtype='internet'
dc_other_hostnames='fmxxxx.hu:mail.fmxxxx.hu:localhost:fmxxxxx.hu:mail.fmxxxxx.hu'
dc_local_interfaces=''
dc_daemon_smtp_ports='25 : 10025'
dc_readhost='mail.fmxxxxx.hu'
dc_relay_domains=''
dc_minimaldns='false'
dc_relay_nets='192.168.0.0/16'
dc_smarthost='mail.fmxxxxx.hu'
CFILEMODE='644'
dc_use_split_config='true'
dc_hide_mailname='true'
dc_mailname_in_oh='true'
dc_localdelivery='mail_spool'
mailname:mail.fmxxxxx.hu

-- System Information:
Debian Release: 5.0.2
   APT prefers proposed-updates
   APT policy: (500, 'proposed-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages exim4-daemon-heavy depends on:
ii  debconf [debconf- 1.5.24                 Debian configuration management sy
ii  exim4-base        4.69-9                 support files for all Exim MTA (v4
ii  libc6             2.7-18                 GNU C Library: Shared libraries
ii  libdb4.6          4.6.21-11              Berkeley v4.6 Database Libraries [
ii  libgnutls26       2.4.2-6+lenny1         the GNU TLS library - runtime libr
di  libldap-2.4-2     2.4.11-1               OpenLDAP libraries
ii  libmysqlclient15o 5.0.51a-24+lenny1      MySQL database client library
ii  libpam0g          1.0.1-5+lenny1         Pluggable Authentication Modules l
ii  libpcre3          7.6-2.1                Perl 5 Compatible Regular Expressi
ii  libperl5.10       5.10.0-19              Shared Perl library
ii  libpq5            8.3.7-0lenny1          PostgreSQL C client library
ii  libsasl2-2        2.1.22.dfsg1-23+lenny1 Cyrus SASL - authentication abstra
ii  libsqlite3-0      3.5.9-6                SQLite 3 shared library

exim4-daemon-heavy recommends no packages.

exim4-daemon-heavy suggests no packages.

-- debconf information:
   exim4-daemon-heavy/drec:

The next ldap lookup this gave me '-7, bad search filter' :

2009-08-19 16:14:16 1MdlvS-0001tR-TG == jschilling at mail.fmxxxxx.hu 
<jano at mail.fmxxxxx.hu> R=ldap_user defer (-1):
  failed to expand "${extract {uid}{${lookup ldap { user="uid=smtp,ou=Special 
Users,dc=fmxxxx,dc=hu" pass=xxxxxxxx 
ldap://192.168.1.6/ou=People,dc=fmxxxx,dc=hu??sub?(& (mail=${local_part}) 
(host=mail.fmxxxx.hu))
  } } } }": lookup of "user="uid=smtp,ou=Special Users,dc=fmxxxx,dc=hu" 
pass=xxxxxx ldap://192.168.1.6/ou=People,dc=fmxxxx,dc=hu??sub?(& 
(mail=jschilling) (host=mail.fmxxxx.hu))
  " gave DEFER: ldap_search failed: -7, Bad search filter

The ldap query is working fine if only _one_ statement is in the lookup. (eg.: 
filter only mail attrib and not any other).


This lookup (with multiple filter statement) is working on debian etch, exim4 is 
from backports.org:

ii  exim4		4.69-9~bpo40+1	metapackage to ease Exim MTA (v4) installati
ii  exim4-base		4.69-9~bpo40+1	support files for all Exim MTA (v4) packages
ii  exim4-config	4.69-9~bpo40+1	configuration for the Exim MTA (v4)
ii  exim4-daemon-heavy	4.69-9~bpo40+1	Exim MTA (v4) daemon with extended features,

I'm using 'apt-get dist-upgrade' to upgrade from Etch to Lenny, and the query 
not working on the upgraded system.