Hi,
So I was trying to do the following search,
(&(automountMapName=auto*)(objectClass=automountMap))
It logs the following though,
slapd[5205]: conn=258105 op=9 SRCH base="ou=automount,ou=system,dc=XXX,dc=XXX,dc=XXX" scope=2 deref=2 filter="(&(?automountMapName=auto*)(objectClass=automountMap))"
If you do this search
(&(automountMapName=*)(objectClass=automountMap))
slapd[5205]: conn=258174 op=1 SRCH base="ou=automount,ou=system,dc=XXX,dc=XXX,dc=XXX" scope=2 deref=0 filter="(&(automountMapName=*)(objectClass=automountMap))"
This is the schema definition on the server (rfc2307bis),
attributeType ( 1.3.6.1.1.1.1.31 NAME 'automountMapName' DESC 'automount Map Name' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
My feeling is that caseExactIA5SubstringsMatch is doing something very wrong here. Shouldn't slapd be returning a error not injecting a ? in my search.
Thanks, derek
Derek Yarnell UNIX Systems Administrator University of Maryland Institute for Advanced Computer Studies
Derek Yarnell wrote:
Hi,
So I was trying to do the following search,
(&(automountMapName=auto*)(objectClass=automountMap))
It logs the following though,
slapd[5205]: conn=258105 op=9 SRCH base="ou=automount,ou=system,dc=XXX,dc=XXX,dc=XXX" scope=2 deref=2 filter="(&(?automountMapName=auto*)(objectClass=automountMap))"
If you do this search
(&(automountMapName=*)(objectClass=automountMap))
slapd[5205]: conn=258174 op=1 SRCH base="ou=automount,ou=system,dc=XXX,dc=XXX,dc=XXX" scope=2 deref=0 filter="(&(automountMapName=*)(objectClass=automountMap))"
This is the schema definition on the server (rfc2307bis),
attributeType ( 1.3.6.1.1.1.1.31 NAME 'automountMapName' DESC 'automount Map Name' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
My feeling is that caseExactIA5SubstringsMatch is doing something very wrong here. Shouldn't slapd be returning a error not injecting a ? in my search.
No. Read RFC 4511. Invalid filters are simply treated as Undefined, they never generate an error response. The '?' is only present in the log message, to identify what was invalid. It has no effect on any of the processing.
openldap-technical@openldap.org