Design of assertion control filter

[Dieter KlÃnter <dieter@dkluenter.de>]

Hi,
following search shows correct results:
ldapsearch -Y EXTERNAL -H ldapi:///    \
-b "cn=billy kid,ou=tombstone,o=avci,c=de" -s base \
"(l:caseExactmatch:=Tombstone)" sn l

# LDAPv3
# base <cn=billy kid,ou=tombstone,o=avci,c=de> with scope baseObject
# filter: (l:caseExactmatch:=Tombstone)
# requesting: sn l 
#

# Billy Kid, tombstone, avci, de
dn: cn=Billy Kid,ou=tombstone,o=avci,c=de
sn: Kid
l: Tombstone

# search result

# numResponses: 2
# numEntries: 1

changing the filter to (l:caseExactmatch:=tombstone) 
shows the expected results

# search result
search: 2
result: 0 Success

Now a search with assertion control allways shows error 122

ldapsearch -YEXTERNAL -e assert='l=Tombstone'-H ldapi:///
-b "cn=Billy Kid,ou=tombstone,o=avci,c=de" -s base sn l

 LDAPv3
# base <cn=Billy Kid,ou=tombstone,o=avci,c=de> with scope baseObject
# filter: (objectclass=*)
# requesting: ldapi:/// sn l 
#

# search result
search: 2
result: 122 Assertion Failed


The same applies to an extended assertion filter
ldapsearch -YEXTERNAL -e assert='l:caseExactmatch:=Tombstone'
-H ldapi:/// -b "cn=Billy Kid,ou=tombstone,o=avci,c=de" -s base sn l

# search result
search: 2
result: 122 Assertion Failed

What is wrong with this assertion filter?


-Dieter

-- 
Dieter KlÃnter | Systemberatung
http://dkluenter.de
GPG Key ID:DA147B05
53Â37'09,95"N
10Â08'02,42"E