[Date Prev][Date Next]
Re: Using a bitwise filter
On 11/22/2011 10:47 AM, Michael Ströder wrote:
If I connect AD server directly, all is OK, I get a search result. But sending
this search to Meta, does not work.
slapd: conn=1004 op=3 SRCH base="dc=meta,dc=pov" scope=2 deref=2
filter="(&(?objectClass=user)(!(?objectClass=Computer))( *?=error* ))"
First I'd try to add the object classes 'user' and 'computer' and the
attribute type userAccountControl to the local OpenLDAP schema. See
slapd-ldap(5) for a note about schema and filters.
Not sure whether the non-existing matching rule 1.2.840.113518.104.22.1683 can be
used though. You cannot just declare matching rules in OpenLDAP's schema files.
Grepping the code, I see that integerBitAndMatch and integerBitOrMatch
are implemented. Perhaps the issue is that UserAccountControl is not
defined; in any case, enumeration (its syntax, 22.214.171.124, according to
is not defined. Adding a syntax (or a matching rule) requires the
corresponding pieces of code for validation and normalization, if
required. It's not a big deal as soon as the specification is available
(and doable), but that's another business.
Dipartimento di Ingegneria Aerospaziale
Politecnico di Milano