[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#3785) filter problem on back-meta

> Full_Name: Raphael Ouazana
> Version: 2.2.27
> OS: Linux
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (
> There is a problem in back-meta with filters like
> "(|(objectclass=*)(objectclass=dummy))"
> When I do :
> ldapsearch -x -s base -b uid=myentry,o=example,c=com -H ldap://server
> "(|(objectclass=*)(objectclass=dummy))"
> I get different result.
> - on OpenLDAP 2.2.6 with back-meta I get 1 entry
> - on OpenLDAP 2.2.27 with back-bdb (which is behind the meta server) I get
> 1
> entry
> - on OpenLDAP 2.2.27 with back-meta I get 0 entry

Assuming that no objectClass "dummy" exists, that bit of the filter
doesn't pass filter mapping validation, so it cannot be rewritten into an
LDAP filter from the parsed form.  As such, the operation is ignored.  I
realize this is not the expected behavior, so I plan to modify the code
such that UNDEFINED is treated like FALSE (i.e. it gets replaced by
"(!(objectClass=*))"), to obtain a behavior that is consistent with that
of local databases.


Pierangelo Masarati

    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497