On Mon, Aug 22, 2022 at 02:07:25PM +0200, Michael Ströder wrote:

HI!

I have the need to search a whole sub-tree for something like collective attributes which AFAIK slapo-collect does not support.

Now I'm wondering whether it's possible to search for the virtual attributes generated by slapo-variant. And probably I'd like to use the regex variant.

I've read the section LIMITATIONS in slapo-variant(5) which says that regex variants only support reading the virtual attributes with scope base. It also implies that searching for these virtual attributes is not possible at all.

Is that correct?

Hi Michael, that's correct, if we can't identify potential candidates upfront, we would have to read the whole DB and do it ourselves. Pretty sure that's the very reason slapo-collect has the same limitations.

As is usual with LDAP, the server isn't set up to correlate random data in a single search, you'll have to run the intermediate searches and synthesize things yourself.

Regards,