Re: Problems with ldapsearch

[Julio Sánchez Fernández <j_sanchez@stl.es>]

Rocío Walias wrote:

> 'objectclass=s*' there's no response and there are objects  beginning with
> s, and the same if I use 'objectclass=*s*'. ¿What's wrong?

Rocío, the attribute type 'objectClass' is described in RFC2256 as:

    ( 2.5.4.0 NAME 'objectClass' EQUALITY objectIdentifierMatch
      SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 )

As you can see, there is no substring matching rule for objectclasses.
As such, your filter evaluates to undefined and no entry matches it.

This may seem bizarre and quite different to what other servers (including
prior versions of OpenLDAP) do but it is what is mandated by RFC2251 in
such situation.

This particular case traces back, I think, to X.500 where they did not
think necessary a substring match on objectclasses.  And they may be
right after all.

No substring matches on distinguished names hurts me more, though.

Julio