Re: Question mark in place of attribute name?

["James F. Hranicky" <jfh@cise.ufl.edu>]

On Thu, 21 Apr 2005 09:04:22 -0400
Michael.Smith@domino1.cuny.edu wrote:

> This is a stupid newbie question, I'm sure, and this 
> probably isn't the place to ask it either, but my openLDAP 
> server is getting search requests from a Websphere instance 
> that look like this (this is the log entry, not the line trace): 
> 
> SRCH base="uid=foo,ou=people,dc=bar,dc=com" 
>         scope=0
>         deref=3
>         filter="(|(objectClass=*)(?=undefined))" 
> 
> What's with this "?=undefined" thing? Is this a legit 
> search syntax? What does it mean? 
> 
> Thanks in advance for all the light I'm sure will be shed -- 

I saw this behavior when using nss_ldap on Solaris. When nss_ldap tried to 
look up this query:

    (&(objectclass=nisNetgroup)(|(nisNetgroupTriple=\(machine,-,domain\))\
    (nisNetgroupTriple=\(machine,-,\))(nisNetgroupTriple=\(machine,,\))\
    (nisNetgroupTriple=\(,-,domain\))(nisNetgroupTriple=\(,-,\))\
    (nisNetgroupTriple=\(machine,,domain\))(nisNetgroupTriple=\(,,domain\))\
    (nisNetgroupTriple=\(,,\))))

the ldap showed this in the logs:

    filter: (&(objectClass=nisNetgroup)(|(?=undefined)(?=undefined)\
    (?=undefined)(?=undefined)(?=undefined)(?=undefined)(?=undefined)\
    (?=undefined)(?=undefined)(?=undefined)(?=undefined)(?=undefined)))

Note that nisNetgroupTriple *was* an attribute defined in nis.schema
which was included in the config file.

However, the original description was this:

   attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
        DESC 'Netgroup triple'
        SYNTAX 1.3.6.1.1.1.0.0 )

I changed it to this:

   attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
        DESC 'Netgroup triple'
        EQUALITY caseExactIA5Match
        SUBSTR caseExactIA5SubstringsMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

and the problem went away.

HTH.

----------------------------------------------------------------------
| Jim Hranicky, Senior SysAdmin                   UF/CISE Department |
| E314D CSE Building                            Phone (352) 392-1499 |
| jfh@cise.ufl.edu                      http://www.cise.ufl.edu/~jfh |
----------------------------------------------------------------------