[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Inappropriate matching



>The filter (member=cn=foo*) is Undefined.  'member' does
>not have a substring matching rule.  There is no substring
>matching rule for distinguished names.
>
>No entry should match this filter.
>
>An LDAPv3 server *should* likely not return the result
>of inappropriate matching, but return success with no
>entries.  The fact that this did not occur leads me to
>believe the server is an LDAPv2 server or is flawed.

Yes, the server is v2. So my only solution is to get all the group members and do a manual compare against the cn portion taking care of duplicates. For my application this would be quicker than searching the entire tree if the dn belongs to the group.

--
Richard Ellerbrock
richarde@eskom.co.za