[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Too many candidates on ldapsearch

Hi Quanah,

Actually, the filter in your example would also work here. Like I said I did not find a non-working example with the "cn" attribute. If your directory maintains the "givenName" and "sn" attributes, it would be interresting to see if something like "(&(givenName=gibson)(cn=brown)(objectclass=posixaccount))" works (that is assuming there is a "gibson-gibson brown" but NO "gibson brown" in your directory).

Quanah Gibson-Mount wrote:

--On Monday, February 02, 2004 11:36 AM -0500 Marc-Andre Gaudreau <Marc-Andre.Gaudreau@USherbrooke.ca> wrote:

Working filters :

(&(cn=marc)(objectClass=person))  =>  ("cn" seems to be ok...)
(&(objectClass=person)(givenName=marc)(sn=gaudreau))  => (because the
objectClass condition is before everything else, this works fine)

Non-working filters :

(&(givenName=marc)(sn=gaudreau)(objectClass=person))  => (this time the
objectClass condition is at the end and this does not work)
(&(givenName=quanah)(sn=gibson)(objectClass=person))  => (same problem
but with "sn" instead)
(&(givenName=joe)(sn=gibson)(objectClass=person))  => (this still does
not work because of the "Gibson-Mount" entry)

Hi Marc,

I still am unable to recreate this behavior. I've done the following search:


And it immediately returns with nothing, where suafsstatus=active is an index that has thousands of matches, and objectclass=posixaccount also returns thousands of matches. "cn=gibson" is a cn entry with the first bit hyphenated (like cn=gibson-gibson brown).

Changing it go (cn=gibson*) correctly returns with a number of matching entries.


Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
ITSS/TSS/Infrastructure Operations
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html