Mailing-List: contact users-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@directory.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <470A3930.9070809@webunity.de>
Date: Mon, 08 Oct 2007 16:05:36 +0200
From: Markus Pohle <apacheds.users@webunity.de>
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: users@directory.apache.org
Subject: Re: [ApacheDS 1.5.1] unable to search for uniqueMember
References: <20071005190330.dojpsfu4fug0koo4@nemo.granus-werkstatt.de>
	 <d45b08f00710060004y47d9c377y52c0948576df2d3a@mail.gmail.com>
	 <470A2051.3080407@webunity.de>
	 <d45b08f00710080536l1799aa38gcddd1948fcd31266@mail.gmail.com>
	 <470A2D63.5090000@webunity.de>
 <d45b08f00710080638j5a9de93fie4d9c5bfdeebb567@mail.gmail.com>
In-Reply-To: <d45b08f00710080638j5a9de93fie4d9c5bfdeebb567@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Ok, i see!

I do understand that ApacheDS 1.5.0 was buggy and therefor version 1.5.1 
was released which is stricter regarding search requests.

Is there a way to do that kind of search with a different way within 
Directory Studio? I ask that because I have to handle a large amount of 
LDAP information where I often need to search for such a think like 
(uniqueMember=uid=g.kelly*)

More and more often I realize that LDAP is not that "Lightweight" its 
name implies :-)

Sorry for all my questions

Markus

Emmanuel Lecharny schrieb:
> Hi,
> 
> 1.5.0 was buggy, so we released 1.5.1
> 
> 1.5.1 is much more strict regarding search requests, and this is why
> what was possible with the old version is not anymore allowad.
> 
> Again, doing a seach with (uniqueMember=uid*) is _not_ allowed by the
> LDAP specification. At best, you should get an empty list.
> 
> Substring search are valid for strings. A DN is not as string.
> 
> On 10/8/07, Markus Pohle <apacheds.users@webunity.de> wrote:
>> Hi Emmanuel,
>>
>> nope sorry - that doesn't make it clearer for me - seems I am too
>> dump...?!??!
>>
>> Why I am able to do such a search for uniqueMember in an ApacheDS
>> Version 1.5.0 and within the snapshot build that Alex made for me some
>> weeks ago?
>>
>> I am totally confused and apologize for that!
>>
>> Markus
>>
>> Emmanuel Lecharny schrieb:
>>> Hi Markus,
>>>
>>> the UniqueMember attributeType is a distinguishedName, which is not a
>>> string. Doing a substring search on a non-string object is not
>>> possible (in fact, it should be treated as undefined - see RFC 4511,
>>> par. 4.5.1.7)
>>>
>>> You cannot get any result with such a filter :
>>> (uniqueMember=uid=g.kelly*)
>>>
>>> Nor can you with :
>>> (ObjectClass=orga*)
>>>
>>> Currently, you will simply get a NPE, which will translate to an
>>> Unexpected Exception on the client side.
>>>
>>> I'm currently investigating what we should return, and I think the
>>> client should receive an empty result instead of an exception.
>>>
>>> I hope it's clear enough
>>>
>>> Emmanuel
>>>
> 
>