[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Bad filter?

"Doyon, Jean-Francois" wrote:
> 
> Hello,
> 
> Can anybody tell me what's wrong with the following filter:
> 
> (&(objectclass=cgdiuser)(cgdiregistersecret=2B79D7841929B28D))
> 
> I really have no idea, but when I try it using ldapsearch, or through
> PerLDAP, I get the following in the slapd logs:
> 
> Aug 10 14:20:37 grumbler slapd[31937]: conn=6 op=1 SRCH
> base="ou=Users,o=CGDI" scope=2 filter="(&(objectClass=cgdiuser)(badfilter))"
> 
> I tried running full debug mode, but didn't see anyting more usefull appear
> ... This filter is implemented using PerLDAP, and used to work fine against
> the Netscape DS 4.1 ...
> 
> the cgdiregistersecret is defined as:
> 
> attributetype ( cgdiregistersecret-oid NAME 'cgdiregistersecret' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

There's no equality rule for this attribute, so the filter
'(cgdiregistersecret=some value)' is illegal. Note that an
illegal filter does not imply an error.

Pierangelo.

-- 
Dr. Pierangelo Masarati    mailto:ando@sys-net.it
Developer, SysNet s.n.c.   http://www.sys-net.it