[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Bad filter?

At 10:20 AM 8/13/2001, Pierangelo Masarati wrote:
>"Doyon, Jean-Francois" wrote:
>> Hello,
>> Can anybody tell me what's wrong with the following filter:
>> (&(objectclass=cgdiuser)(cgdiregistersecret=2B79D7841929B28D))
>> I really have no idea, but when I try it using ldapsearch, or through
>> PerLDAP, I get the following in the slapd logs:
>> Aug 10 14:20:37 grumbler slapd[31937]: conn=6 op=1 SRCH
>> base="ou=Users,o=CGDI" scope=2 filter="(&(objectClass=cgdiuser)(badfilter))"
>> I tried running full debug mode, but didn't see anyting more usefull appear
>> ... This filter is implemented using PerLDAP, and used to work fine against
>> the Netscape DS 4.1 ...
>> the cgdiregistersecret is defined as:
>> attributetype ( cgdiregistersecret-oid NAME 'cgdiregistersecret' SYNTAX
>There's no equality rule for this attribute, so the filter
>'(cgdiregistersecret=some value)' is illegal.


LDAP filters have three value logic: True, False, and Undefined.

>Note that an
>illegal filter does not imply an error.

>Dr. Pierangelo Masarati    mailto:ando@sys-net.it
>Developer, SysNet s.n.c.   http://www.sys-net.it