[Date Prev][Date Next]
Re: meaning of "attr=**" filter
I have an impression that I understand what you are saying.
Thanx a lot and best regards, vadim tarassov.
On Mon, 2005-06-13 at 12:42 -0700, Kurt D. Zeilenga wrote:
> At 11:57 AM 6/13/2005, vadim wrote:
> >Do you know how slapd interprets "attribute=**" search filter? When I
> >use such filter, I get no results, although with "attribute=*" I get
> >expected number of results. It is a bit confusing to observe such
> >difference, because in terms of wildcards "**" seems to be very similar
> >to "*".
> '*' is not a wildcard here. See RFC 2254.
> OpenLDAP Software filter string parser (which operates on the
> client when searching) regards the filter string (attribute=**)
> as a substrings assertion with single empty any substring,
> which is quite different than a presence assertion.
> When evaluated on the server, that substrings assertion
> may be Undefined (which would explain the behavior you see).
> Certainly asserting empty substrings is nonsensical.