Hello,
I'm configuring an application using my openldap and I'm seeing queries I didn't know them before. The queries are like this:
filter="(|(objectClass=groupOfNames)(?objectClass=container)(objectClass=organization)(objectClass=organizationalUnit)(objectClass=domain)(?objectClass=domaincomponent)(?objectClass=builtinDomain))"
This may be the first time I see the ? in the search filter of a query.
But when I try to reproduce it with ldapsearch command I get:
$ ldapsearch '(|(objectClass=groupOfNames)(?objectClass=container)(objectClass=organization)(objectClass=organizationalUnit)(objectClass=domain)(?objectClass=domaincomponent)(?objectClass=builtinDomain))' # extended LDIF # # LDAPv3 # base <dc=Telematica> (default) with scope subtree # filter: (|(objectClass=groupOfNames)(?objectClass=container)(objectClass=organization)(objectClass=organizationalUnit)(objectClass=domain)(?objectClass=domaincomponent)(?objectClass=builtinDomain)) # requesting: ALL #
ldap_search_ext: Bad search filter (-7)
I guess the problem in the query is because of the '?' operator. So, how can I reproduce it with ldapsearch?
And... what does this '?' mean?
Thanks,
--- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337
On 9/21/21 14:20, Ángel L. Mateo Martínez wrote:
I'm configuring an application using my openldap and I'm seeing queries I didn't know them before. The queries are like this:> filter="(|(objectClass=groupOfNames)(?objectClass=container)..
This indicates that the name of the object class 'container' used as assertion value in your filter is not present in your configured subschema.
Also you might see the question mark if the assertion type is missing in the subschema, like in this hypothetic example indicating attribute type 'foo' is missing:
(?foo=bar)
So you either have to fix the LDAP client to not use invalid assertion types/values or you might want to add those definitions to your subschema.
The example you showed indicates that the LDAP client was developed for MS AD. So you might want to start with this:
https://git.openldap.org/openldap/openldap/-/blob/master/servers/slapd/schem...
But 'container' is commented in above file. Not sure why.
Ciao, Michael.
openldap-technical@openldap.org