Re: Finding 'department' in Outlook 2002

["Pierangelo Masarati" <ando@sys-net.it>]

> Hi,
>
> I found in 2001 year archives unresolved problem: how to be able to get
> Outlook 2002 to do "department" searches from an OpenLDAP directory?
>
> Slapd debug shows:
> conn=1 op=2 SRCH base="o=IL" scope=2 filter="(&(undefined)(undefined))"
>
> On the other hand someone has put that problem in
> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=55901
> and there is no resolution. Is this problem of slapd or Outlook 2002?
> Has anybody found the solution since 2001 year?

1) use a bit more debug to see what else is getting thru; I see 2
undefined parts of the filter, not just (allegedly)
"department=<something>".

2) "department" has to be defined in slapd's schema; there seems to be no
standard track of an attributeType called "department", although I see a

attributetype ( 1.2.840.113556.1.2.141
        NAME 'department'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
        SINGLE-VALUE )

in a microsoft.schema file that is (or has been) distributed with slapd. 
Since no equality (nor substr) rule is defined for it, it cannot be used
for filtering.

If you need to filter for "department", then slapd is not the right tool
unless you can provide an appropriate specification for that attribute
type, i.e. add an appropriate equality rule to the specification provided
in microsoft.schema.

If you don't, and your only problem is that outlook is using "department"
in a filter (and it's OR-ed, so that a non-match doesn't result in an
empty result) you can try to strip it from the search filter.  You can do
it (if you use the right version, for sure 2.2.latest) via back-ldap, by
proxying the actual DSA, and using a rewrite rule like

rewriteEngine on
rewritecontext searchFilter
rewriteRule "^(.*)\(department=[^)]+\)(.*)$" "%1%2"
rewriteRule "^$" "(objectClass=*)" "@"

p.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497