[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Bad filter?

At 10:20 AM 8/13/2001, Pierangelo Masarati wrote:
>"Doyon, Jean-Francois" wrote:
>> 
>> Hello,
>> 
>> Can anybody tell me what's wrong with the following filter:
>> 
>> (&(objectclass=cgdiuser)(cgdiregistersecret=2B79D7841929B28D))
>> 
>> I really have no idea, but when I try it using ldapsearch, or through
>> PerLDAP, I get the following in the slapd logs:
>> 
>> Aug 10 14:20:37 grumbler slapd[31937]: conn=6 op=1 SRCH
>> base="ou=Users,o=CGDI" scope=2 filter="(&(objectClass=cgdiuser)(badfilter))"
>> 
>> I tried running full debug mode, but didn't see anyting more usefull appear
>> ... This filter is implemented using PerLDAP, and used to work fine against
>> the Netscape DS 4.1 ...
>> 
>> the cgdiregistersecret is defined as:
>> 
>> attributetype ( cgdiregistersecret-oid NAME 'cgdiregistersecret' SYNTAX
>> 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
>
>There's no equality rule for this attribute, so the filter
>'(cgdiregistersecret=some value)' is illegal.

s/illegal/Undefined/

LDAP filters have three value logic: True, False, and Undefined.

>Note that an
>illegal filter does not imply an error.






>Pierangelo.
>
>-- 
>Dr. Pierangelo Masarati    mailto:ando@sys-net.it
>Developer, SysNet s.n.c.   http://www.sys-net.it