Return-Path: Delivered-To: apmail-directory-users-archive@www.apache.org Received: (qmail 42225 invoked from network); 27 Nov 2009 12:57:18 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 27 Nov 2009 12:57:18 -0000 Received: (qmail 64035 invoked by uid 500); 27 Nov 2009 12:57:18 -0000 Delivered-To: apmail-directory-users-archive@directory.apache.org Received: (qmail 63955 invoked by uid 500); 27 Nov 2009 12:57:18 -0000 Mailing-List: contact users-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@directory.apache.org Delivered-To: mailing list users@directory.apache.org Received: (qmail 63945 invoked by uid 99); 27 Nov 2009 12:57:18 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 27 Nov 2009 12:57:18 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.9] (HELO minotaur.apache.org) (140.211.11.9) by apache.org (qpsmtpd/0.29) with SMTP; Fri, 27 Nov 2009 12:57:08 +0000 Received: (qmail 42161 invoked by uid 99); 27 Nov 2009 12:56:47 -0000 Received: from localhost.apache.org (HELO mail-fx0-f224.google.com) (127.0.0.1) (smtp-auth username elecharny, mechanism plain) by minotaur.apache.org (qpsmtpd/0.29) with ESMTP; Fri, 27 Nov 2009 12:56:47 +0000 Received: by fxm24 with SMTP id 24so1311473fxm.11 for ; Fri, 27 Nov 2009 04:56:45 -0800 (PST) MIME-Version: 1.0 Reply-To: elecharny@apache.org Received: by 10.223.143.15 with SMTP id s15mr151106fau.77.1259326604251; Fri, 27 Nov 2009 04:56:44 -0800 (PST) In-Reply-To: <358FADC2CBB6D1429F83698954F4EB373C33CF6D26@bpvmexm01.qualysoft.hu> References: <358FADC2CBB6D1429F83698954F4EB373C33CF6D26@bpvmexm01.qualysoft.hu> Date: Fri, 27 Nov 2009 13:56:44 +0100 Message-ID: Subject: Re: [ApacheDS] Querying for uniqueMember matches From: Emmanuel Lecharny To: users@directory.apache.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Virus-Checked: Checked by ClamAV on apache.org ADS version ? On Fri, Nov 27, 2009 at 1:36 PM, SCHEDENIG Marian wrote: > Hi! > > I'm getting exceptions when trying to query the groups a user belongs to.= I'm using groupOfUniqueNames to represent the groups, so I have to search = for all elements where uniqueMember matches the user's DN. > > This is my query: > (uniqueMember=3Duid=3Dfigaro,ou=3Dusers,o=3Dinfinica) > > (I've tried escaping all the "=3D" and "," after uid, but it makes no dif= ference) > > The query succeeds if the base DN I'm using doesn't contain any groupOfUn= iqueNames entries. But as soon as those are available, regardless of whethe= r the uniqueMember attribute actually matches, I get the following exceptio= n (copied from Directory Studio; I don't know why it displays the error mes= sage in German): > > Fehler w=E4hrend des Suchvorgangs > =A0- [LDAP: error code 80 - OTHER: failed for =A0 =A0 SearchReques > =A0javax.naming.NamingException: [LDAP: error code 80 - OTHER: failed for= =A0 =A0 SearchRequest > =A0 =A0 =A0 =A0baseDn : '2.5.4.11=3Dtest,2.5.4.10=3Dinfinica' > =A0 =A0 =A0 =A0filter : '(|:[9223372036854775807](2.5.4.50=3Duid=3Dfigaro= ,ou=3Dusers,o=3Dinfinica:[9223372036854775807])(2.5.4.0=3Dreferral:[9223372= 036854775807]))' > =A0 =A0 =A0 =A0scope : whole subtree > =A0 =A0 =A0 =A0typesOnly : false > =A0 =A0 =A0 =A0Size Limit : 1000 > =A0 =A0 =A0 =A0Time Limit : no limit > =A0 =A0 =A0 =A0Deref Aliases : deref Always > =A0 =A0 =A0 =A0attributes : 'cn', 'objectclass' > : null]; remaining name 'ou=3Dtest,o=3Dinfinica' > =A0 =A0 =A0 =A0at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source) > =A0 =A0 =A0 =A0at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Sou= rce) > =A0 =A0 =A0 =A0at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Sou= rce) > =A0 =A0 =A0 =A0at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source) > =A0 =A0 =A0 =A0at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source) > =A0 =A0 =A0 =A0at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(U= nknown Source) > =A0 =A0 =A0 =A0at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.sea= rch(Unknown Source) > =A0 =A0 =A0 =A0at org.apache.directory.studio.connection.core.io.jndi.JND= IConnectionWrapper$1.run(JNDIConnectionWrapper.java:356) > =A0 =A0 =A0 =A0at org.apache.directory.studio.connection.core.io.jndi.JND= IConnectionWrapper.runAndMonitor(JNDIConnectionWrapper.java:1272) > =A0 =A0 =A0 =A0at org.apache.directory.studio.connection.core.io.jndi.JND= IConnectionWrapper.checkConnectionAndRunAndMonitor(JNDIConnectionWrapper.ja= va:1203) > =A0 =A0 =A0 =A0at org.apache.directory.studio.connection.core.io.jndi.JND= IConnectionWrapper.search(JNDIConnectionWrapper.java:398) > =A0 =A0 =A0 =A0at org.apache.directory.studio.ldapbrowser.core.jobs.Searc= hRunnable.search(SearchRunnable.java:500) > =A0 =A0 =A0 =A0at org.apache.directory.studio.ldapbrowser.core.jobs.Searc= hRunnable.searchAndUpdateModel(SearchRunnable.java:320) > =A0 =A0 =A0 =A0at org.apache.directory.studio.ldapbrowser.core.jobs.Searc= hRunnable.run(SearchRunnable.java:184) > =A0 =A0 =A0 =A0at org.apache.directory.studio.connection.core.jobs.Studio= ConnectionJob.run(StudioConnectionJob.java:114) > =A0 =A0 =A0 =A0at org.eclipse.core.internal.jobs.Worker.run(Worker.java:5= 5) > > =A0[LDAP: error code 80 - OTHER: failed for =A0 =A0 SearchRequest > =A0 =A0 =A0 =A0baseDn : '2.5.4.11=3Dtest,2.5.4.10=3Dinfinica' > =A0 =A0 =A0 =A0filter : '(|:[9223372036854775807](2.5.4.50=3Duid=3Dfigaro= ,ou=3Dusers,o=3Dinfinica:[9223372036854775807])(2.5.4.0=3Dreferral:[9223372= 036854775807]))' > =A0 =A0 =A0 =A0scope : whole subtree > =A0 =A0 =A0 =A0typesOnly : false > =A0 =A0 =A0 =A0Size Limit : 1000 > =A0 =A0 =A0 =A0Time Limit : no limit > =A0 =A0 =A0 =A0Deref Aliases : deref Always > =A0 =A0 =A0 =A0attributes : 'cn', 'objectclass' > : null] > > Perhaps my query is wrong, but I don't see why. Apparently there was a bu= g with uniqueMember queries in ApacheDS, but according to Jira, it's been f= ixed since 2007. > > Please advise, > Marian. > > --=20 Regards, Cordialement, Emmanuel L=E9charny www.iktek.com