[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Filtering on meberUid vs cn
- To: <openldap-software@openldap.org>
- Subject: Filtering on meberUid vs cn
- From: "Marantz, Roy" <Roy.Marantz@deshaw.com>
- Date: Wed, 6 Feb 2008 17:06:40 -0500
- Content-class: urn:content-classes:message
- Thread-index: AchpDIyFbr/NhqxdRC6OFSTerUC8pQ==
- Thread-topic: Filtering on meberUid vs cn
Please excuse me if this is an off list topic. I think this may be
specific to OpenLDAP
so I'm trying here.
I'm running OpenLDAP 2.4.7 w/ BerkeleyDB 4.6.21 on Solaris-10.
I'm running OpenLDAP as a fairly standard NIS replacement. In
particular I have a DIT
ou=group,dc=nyc,dc=deshaw,dc=com made of objects of class posixGroup
(from the
supplied nis.schema file). Solaris want to get a getgrmember()
(undocumented subroutine
call) which does a ldap search like the first one following.
This search returns nentries=0
ldapsearch -x -LLL -h 127.0.0.1 -b 'ou=group,dc=nyc,dc=deshaw,dc=com'
'(&(objectClass=posixGroup)(memberUid=marantz))'
conn=2354 op=1 SRCH base="ou=group,dc=nyc,dc=deshaw,dc=com" scope=2
deref=0 filter="(&(objectClass=posixGroup)(memberUid=marantz))"
conn=2354 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
But this search shows at least one object that I think should match
ldapsearch -x -LLL -h 127.0.0.1 -b 'ou=group,dc=nyc,dc=deshaw,dc=com'
'(&(objectClass=posixGroup)(cn=www))'
dn: cn=www,ou=Group,dc=nyc,dc=deshaw,dc=com
objectClass: posixGroup
objectClass: top
cn: www
userPassword:: XXXXXXXXXXXX
gidNumber: XXXX
memberUid: XXXXXX
memberUid: marantz
memberUid: XXXXXX
memberUid: XXXX
memberUid: XXXXXX
memberUid: XXXXXX
memberUid: XXX
memberUid: XXXXXXXX
conn=3087 op=1 SRCH base="ou=group,dc=nyc,dc=deshaw,dc=com" scope=2
deref=0 filter="(&(objectClass=posixGroup)(cn=www))"
conn=3087 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
The only difference I can find is the Equality Matching value for the 2
attributes. I
notice that cn has a Equality Matching value of caseIgnoreMatch vs.
caseExactA5Match for
memberUid. (at least according to
http://ldap.akbkhome.com/index.php/objectclass/posixGroup.html)
I don't see how, but could that be involved in my problem?
Any help would be greatly appreciated.
Thanks.
Roy