[Date Prev][Date Next]
Re: "Bad search filter"?
On Fri, 23 Apr 2010, Luis Neves wrote:
> Can someone confirm this error please?
> Try to make a ldapsearch agains any attribute on a ldap directory with
> this filter please:
> Iam geting "bad search filter' because of the '\x'. But I need this
> search working to be able to query a X.509 Certificate field.
Indeed, that's not a valid value in an LDAP search filter. You need to
distinguish between the true value and *an* encoded value and make sure
you're using the correct encoding for the protocol or format. In this
is the value as encoded by openssl's x509 code for displaying DNs. The
true value consists of the UTF-8 representation of the letters 'C', 'a',
'r', 't', 'a with tilde', and 'o'. To include that in an LDAP search
filter, you need to follow the rules in RFC 4515. If you do that, you
That's an easy one, but other encodings have more baggage, like RFC 2047's
encoding for email header fields, in which this would be:
(If you consider the character to be the true value, independent of the
charset used, then you might consider this:
to be the same...)