On Jun 14, 2012, at 2:10 PM, quanah@openldap.org wrote:

Full_Name: Quanah Gibson-Mount Version: 2.4.31 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.108.184.39)

Handling "!" with objectClasses appears to be broken. For example, if I perform the following ldap query:

zimbra@zre-ldap002:~$ ldapsearch -LLL -x -H ldapi:/// -D cn=config -w zimbra -b "" '(!(objectclass=junk))' zimbra@zre-ldap002:~$

This result appears incorrect to me. I would expect it to return all entries without that objectClass (which in this case, would be every entry).

which object class (by OID)? If the server doesn't know what junk is, (!(objectClass=junk)) is just as undefined (objectclass=junk) is.

Doing the same sort of search on a different attribute, the behavior is as expected:

Bad expectation, as junk here is a string not a descriptor.

ldapsearch -LLL -x -H ldapi:/// -D cn=config -w zimbra -b "" '(!(mail=junk))'

[snip]

# search result search: 2 result: 0 Success

# numResponses: 82 # numEntries: 81