S James S Stapleton wrote:

I didn't realize that was specific to filters.

It is not specific to filters. It is specific to specific contexts. Did you read slapo-rwm(5)?

So this is a search then?

overlay rwm rwm-rewriteEngine off

??? "off" ???

#note: I changed the name of the filter since the original name wasn't usefully descriptive rwm-rewriteMap ldap "realMailSearchLookup" "ldap://the-server:389/ou=People,dc=osu,dc=edu?entryDN?sub"

rwm-rewriteContext searchFilter

Rules that follow will be invoked only during searches, passing the search filter

rwm-rewriteRule "^\(&\(objectClass=person\)\(uid=([a-zA-Z]+\.[0-9]+)\)\)$"

This pattern is supposed to be filter specific, as it is defined for a "searchFilter" context

"${RealMailSearchLookup(mail=$1@osu.edu)}" ":@"

The result of the map lookup will be used as search filter, replacing the original filter. But your map returns a DN, which is __NOT__ a valid search filter. So the remote server will barf (unless local controls reject the search without even contacting the remote server; I'm not sure about this).

":@"

#added because it didn't seem to be matching anything #rwm-rewriteContext searchDN alias searchFilter

A "searchDN" context cannot use rules defined for filters, since it is supposed to be passed and to return a DN, and a filter and a DN usually differ radically.

#rwm-rewriteContext searchFilterAttrDN alias searchFilter

Same as above.

just for grins, I tried this, but with no luck either:

rwm-rewriteRule "^(.*)\(&\(objectClass=person\)\(uid=([a-zA-Z]+\.[0-9]+)\)\)(.*)$" "$1(&(objectClass=person)(mail=$2@osu.edu))$3" "@"

Not sure what you're trying to achieve. But slapo-rwm(5) is not the right tool to just try and see what happens. Unless you follow some rationale, it can give very puzzling results (usually just nothing, which is frustrating).

I'd rather go back and describe what you want to obtain.

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------