Hi.
We have a product that uses LDAP to manage Users and Group, that operates well w/ Active Directory, and iPlanet Ldap Server, but there is a problem with OpenLdap (2.0.x and 2.1.x).
In our group management we use filters such as:
(&(objectclass=groupOfNames) (member=uid=sam,*))
This filter doesn't work since the member Attribute doesn't have a SUBSTR match function. I tried w/ a CaseIgnoreSubstringsMatch but since we compare dn it doesnt handle every cases.
Adding a DistinguishedNameSubstringMatch would be a solution. iPlanet seems to have that matching function, since the above filter works.
Any suggestions ?
Is there a DistinguishedNameSubstringMatch function already existing, is it planned to be releases in future releases of Openldap, or is it agains a RFC ?
Thanx.
Samuel.Lellouche@activcard.fr
Integration and System Engineer
Customer Service
ActivCard Europe S.A.
24-28 Avenue du General de Gaulle
92156 SURESNES, Cedex
France
Tel: 33(0) 1.42.04.84.00
Fax: 33(0) 1.42.04.84.84
http://www.activcard.fr/