Re: (ITS#6421) simple filter with no brackets breaks slapo-dynlist(5)

[h.b.furuseth@usit.uio.no]

masarati@aero.polimi.it writes:
> When a memberURL contains a simple filter with no brackets, like
> 
> ldap:///ou=People,dc=example,dc=com???objectClass=person
> slapo-dynlist(5) is unable to build the composite filter needed
> for the related internal search.
> 
> A fix is coming.

Are you sure that's a good idea to fix?

It's not a valid LDAP filter, even though OpenLDAP accepts it in
many places.  That we accept it from users in tools is fair enough,
but I'm not sure it's a good idea to accept them on the server side.

Makes them one step closer to interoperability problems if they
reach other servers that do not slap on the necessary parens.

-- 
Hallvard