Armando Martins wrote: > Hi, > > I'm trying to sync a active directory with a openldap and for update the > entries i use the objectsid binary attribute of the active directory as the > link attribute between the two directories. > > I'm having an issue with the binary data inserted in a octetstring attribute. > There is no problem to insert the data in the attribute. but when i request > the attribute there is no entries returned. Howerver, when i do the same > request in active directory it returns me the right answer. > > Here is my attribute specification in openldap : > > attributetype ( 1.3.6.1.4.1.31631.1.1.2.1.1 > NAME 'binarysid' > DESC 'binary object' > SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 > ) > > and here is the data inserted in this attribute : > > binarysid:: AQUAAAAAAAUVAAAA77+9OzJ577+9Ve+/vVEdA2pm77+977+9AAA= > > if i request my openldap with this filter : > > filter="(&(objectClass=inetOrgPerson)(binarysid=\01\05\00\00\00\00\00\05\15\00\00\00\CE;2y\C5U\C2Q\1D\03jf\ED\FB\00\00))" > > No answer is returned, but when i request the active directory with this filter : > > filter="(&(objectClass=user)(objectsid=\01\05\00\00\00\00\00\05\15\00\00\00\CE;2y\C5U\C2Q\1D\03jf\ED\FB\00\00))" > > He returns me the right answer... > > Do i have a problem with my attribute in openldap? > > if someone could help me, I will really appreciate. You did not add an EQUALITY matching rule to your attribute type description. Ciao, Michael.