https://bugs.openldap.org/show_bug.cgi?id=10432

Issue ID: 10432 Summary: filter with typo'ed attribute name causes 0 results Product: OpenLDAP Version: 2.6.7 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: slapd Assignee: bugs@openldap.org Reporter: simon.leary42@proton.me Target Milestone: ---

Here is a filter for posixAccount entries missing the sshPublicKey attribute:

``` (&(objectClass=posixAccount)(!(sshPublicKey=*))) ```

It works normally.

If I made a typo and instead searched for entries missing some other bogus attribute name:

``` (&(objectClass=posixAccount)(!(ssshPublicKey=*))) ```

I get 0 results.

None of my posixAccounts have an `ssshPublicKey` attribute, so I would think that the right half of my filter should be always true. So every posixAccount should be returned. Am I wrong to think that?

Note: the `!(foo=*)` syntax comes from [stackoverflow](https://stackoverflow.com/questions/14441529/ldap-filter-for-blank-empty-att...)