[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Bad filter?

"Doyon, Jean-Francois" wrote:
> Hello,
> Can anybody tell me what's wrong with the following filter:
> (&(objectclass=cgdiuser)(cgdiregistersecret=2B79D7841929B28D))
> I really have no idea, but when I try it using ldapsearch, or through
> PerLDAP, I get the following in the slapd logs:
> Aug 10 14:20:37 grumbler slapd[31937]: conn=6 op=1 SRCH
> base="ou=Users,o=CGDI" scope=2 filter="(&(objectClass=cgdiuser)(badfilter))"
> I tried running full debug mode, but didn't see anyting more usefull appear
> ... This filter is implemented using PerLDAP, and used to work fine against
> the Netscape DS 4.1 ...
> the cgdiregistersecret is defined as:
> attributetype ( cgdiregistersecret-oid NAME 'cgdiregistersecret' SYNTAX

There's no equality rule for this attribute, so the filter
'(cgdiregistersecret=some value)' is illegal. Note that an
illegal filter does not imply an error.


Dr. Pierangelo Masarati    mailto:ando@sys-net.it
Developer, SysNet s.n.c.   http://www.sys-net.it