[Python] What config options might be affecting how the wildcard operater works in a LDAP query

I have two open OpenLDAP servers. A test environment and a production environment.

The wildcard operator seems to be not working in the production environment, but it does work in the test environment. These are, as far as i know configured the same. I typically use python to interact with OpenLDAP.

If i run

ldap.search_ext_s(base='ou=my_branch,o=my_organization', scope=ldap.SCOPE_SUBTREE, filterstr='uid=foobar')

it will find the data with the attr uid whose value is foobar. Yet if i specify the filter as uid=*foobar* then it only works on the development server.

On both servers the output of the command /usr/sbin/slapcat -n 0 | grep olcDbIndex outputs the same thing. For the uid attribute it is olcDbIndex: uid pres,eq,sub. I'm not certain that it is related but that is the last change that has been made as far as I know.

So I'm wondering what options/configurations/schemas I can compare between the two servers to try and figure out why it works as expected on the development server but not on the production server?

Edit: I'm really at a loss here so any information on how I might introspect into this issue could be helpful.

Continue reading...