Fedora directory users - Dec 2007 - failed to decode LDAP controls - error code 12 (not documented)

Hello all,

I''m deploying an LDAP structure at my organization, and I saw something
weird with a CISCO equipment, where Fedora DS give an error not
documented on wiki, nor any reference on the internet. The message
follow:

[27/Dec/2007:13:37:54 -0200] conn=1 op=20 SRCH base="o=AAA BBB"
scope=2 filter="(&(objectClass=posixAccount)(o=CCC))", failed to
decode LDAP controls
[27/Dec/2007:13:37:54 -0200] conn=1 op=20 RESULT err=12 tag=101 nentries=0
etime=0

Does anyone know what this mean?

Thanks,
-- 
Daniel Cristian Cruz
Analista de Sistemas - Administrador de Banco de Dados
SENAI/SC  - Servico Nacional de Aprendizagem Industrial
NTI - Núcleo de Tecnologia da Informação
Fone: (48) 3239-1422

On Thu, 2007-12-27 at 15:07 -0200, Daniel Cristian Cruz
wrote:
> [27/Dec/2007:13:37:54 -0200] conn=1 op=20 SRCH base="o=AAA BBB"
scope=2 filter="(&(objectClass=posixAccount)(o=CCC))", failed to
decode LDAP controls
> [27/Dec/2007:13:37:54 -0200] conn=1 op=20 RESULT err=12 tag=101 nentries=0
etime=0
> 
> Does anyone know what this mean?
It means that the Cisco device tried to use an LDAP control that the
server didn''t understand. My next step would be to check the logs on
the
Cicso thing to see what it thinks it''s trying to do, and whether it got
the information it needed. It''s possible that it may simply try one
method, then fall back to something more widely supported when it fails.
That''s not really the right way to discover the LDAP server''s
capabilities, but it might work. If something is really not working, and
the logs don''t make clear what the device is trying to do, I might then
go after packet data with a tool like Wireshark.

Hope that helps.

-Andrew