Jon Roberts wrote:
As I recall, OpenLDAP is configured by default to limit search
filters to at least 3 significant characters.
You might want to have a look at this ITS
http://www.openldap.org/its/index.cgi/Contrib?id=2661
A version of this feature is now in OpenLDAP 2.3.
Also
http://www.openldap.org/its/index.cgi/Software%20Enhancements?id=2588
Filtering now works better for filters using longer subinitial and
subfinal filter strings as well.
The slapd.conf(5) manpage in OpenLDAP 2.3 has of course been updated to
describe the new substring index configuration options.