Bug #72753 [Asn]: ldap_search returns zero results when searching for large integers

Edit report at https://bugs.php.net/bug.php?id=72753&edit=1 ID: 72753 Updated by: heiglandreas@php.net Reported by: justinasu at gmail dot com Summary: ldap_search returns zero results when searching for large integers Status: Assigned Type: Bug Package: LDAP related Operating System: windows 8.1 x64 PHP Version: 7.0.9 Assigned To: heiglandreas Block user comment: N Private report: N New Comment: Thanks for the details! I'll see that I dig into it further! I might come back with mor e questions… Previous Comments: ------------------------------------------------------------------------ [2017-01-10 10:03:03] justinasu at gmail dot com yes, ldapsearch returns results as expected: ldapsearch -H 'ldaps://<ldapserver>' -D 'username@domain' -b '<base dn>' -W -s sub "(usnchanged>=4261605367)" cn sn # search result search: 2 result: 4 Size limit exceeded # numResponses: 1004 # numEntries: 1000 # numReferences: 3 ldapsearch: @(#) $OpenLDAP: ldapsearch 2.4.40 (May 10 2016 23:31:28) $ mockbuild@worker1.bsys.centos.org:/builddir/build/BUILD/openldap-2.4.40/openldap-2.4.40/build-clients/clients/tools (LDAP library: OpenLDAP 20440) php is 64bit: var_dump(PHP_INT_SIZE); int(8) this bug is reproduced all the way up to php v5.5. This is the oldest version i have tried. ------------------------------------------------------------------------ [2017-01-09 21:55:13] heiglandreas@php.net The interesting thing is that the filter is a string and is passed to the underlying LDAP-library (usually OpenLDAP) as string. So there isn't a conversion to an integer value on PHP-side. Therefore I'm inclined to say that the conversion to an integer is done in the underlying LDAP-library. Can you check whether that lib is a 32bit or a 64bit build? And can you get a result using f.e. ldapsearch instead of the ActiveDirectory explorer? Thanks for your help! ------------------------------------------------------------------------ [2016-08-04 09:35:38] justinasu at gmail dot com Description: ------------ <ldapserver> and <base dn> in test script should be substituted with some ldap server that you have access to and you need to have read permission to usnchanged attribute. when searching for entries by usnchanged which is a Microsoft proposed way of polling for changes, the test script returns 0 results. But if you run the same filter query in Active Directory explorer or some other tool i get many results - couple of thousand. if the value is smaller lets say (usnchanged>=261605367) i get expected results. i suspect that somewhere in LDAP php internals the value gets interpreted as 32bit integer and since it's max is 4,294,967,295, the query with higher values never returns any results. usnchanged field is 8bit INTERGER (BIGINT) in Active Directory. tried on linux Centos 6.8 x64 the result is the same. Test script: --------------- $res = ldap_connect('ldap://<ldapserver>'); ldap_set_option($res, LDAP_OPT_PROTOCOL_VERSION, 3); ldap_bind($res) $response = ldap_search($res, '<base dn>', '(usnchanged>=4261605367)'); $result = ldap_get_entries($res, $response); var_dump($result); Expected result: ---------------- array with count > 0 Actual result: -------------- array with count === 0 ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=72753&edit=1