Yes i've also think to that. And i've try to put the octetStringMatch
equality matching rule in my attribute definition. But unfortunately, the
result is the same...
2015-09-02 21:54 GMT+02:00 Michael Ströder <michael(a)stroeder.com>:
Armando Martins wrote:
> I'm trying to sync a active directory with a openldap and for update the
> entries i use the objectsid binary attribute of the active directory as
> link attribute between the two directories.
> I'm having an issue with the binary data inserted in a octetstring
> There is no problem to insert the data in the attribute. but when i
> the attribute there is no entries returned. Howerver, when i do the same
> request in active directory it returns me the right answer.
> Here is my attribute specification in openldap :
> attributetype ( 184.108.40.206.4.1.316220.127.116.11.1.1
> NAME 'binarysid'
> DESC 'binary object'
> SYNTAX 18.104.22.168.4.1.1422.214.171.124.40
> and here is the data inserted in this attribute :
> binarysid:: AQUAAAAAAAUVAAAA77+9OzJ577+9Ve+/vVEdA2pm77+977+9AAA=
> if i request my openldap with this filter :
> No answer is returned, but when i request the active directory with this
> He returns me the right answer...
> Do i have a problem with my attribute in openldap?
> if someone could help me, I will really appreciate.
You did not add an EQUALITY matching rule to your attribute type