Re: ldapsearch & integerBitAndMatch

["Pierangelo Masarati" <ando@sys-net.it>]

I note that 2.2.6 is a very old release.  I suggest upgrading, especially
because I remember there has been quite a bit of work in the area of
matching rules and extensible filters since then.

p.

>
> Using the ldapsearch from 2.2.6, I am not able to use the following
> filter:
> (userAccountControl:1.2.840.113556.1.4.803:=2)
>
> I use this statement:
> ldapsearch  -x -H ldap://ad.mydomain.com -b "dc=ad,dc=mydomain,dc=com"
> '(userAccountControl:1.2.840.113556.1.4.803:=2)'
>
> I receive:
> ldap_result: Can't contact LDAP server (-1)
>
> In comparison, this works properly:
> ldapsearch  -x -H ldap://ad.mydomain.com -b "dc=ad,dc=mydomain,dc=com"
> '(userAccountControl=512)'
>
> Is there some other syntax I can use to perform a "integerBitAndMatch"
> search against my Active Directory?
>
> I believe this is a problem with ldapsearch, not Active Directory.  I
> notice an archived ITS #1302 (from 2001) committing this type of match
> rule to the OpenLDAP server.  If this is not the appropriate mailing
> list for OpenLDAP client utils, please let me know.
>
> Thank you,
> -Matt
> --
> Matthew J. Smith <matt.smith@uconn.edu>
> University of Connecticut ITS
> PGP Key: http://web.uconn.edu/dotmatt/matt.asc
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
>
> iD8DBQBBf+Xqisr4Dd3b/KURAmQ/AJ0SsZZWu1X6pW8RPyU/f/80cX+gYQCeJanN
> F41ywhAjGTOk0d7AS2+YiPs=nKM8
> -----END PGP SIGNATURE-----
>


-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497