Andrew Findlay <andrew.findlay(a)skills-1st.co.uk> wrote:
You could try using the extended search filter syntax:
(dhcpOption:caseIgnoreSubstringsMatch:=boot*)
See RFC4515 for more details. In practice you will probably want to create a
I tried and failed ... where did I mistake? :(
for original ldapns.schema
1. search works with filter: (authorizedService=mail(a)hh001.umidb)
(and without index it returns empty result)
# base <ou=People,dc=umidb> with scope subtree
# filter: (authorizedService=mail(a)hh001.umidb)
# requesting: authorizedService uid
#
# mail(a)hh001.umidb, tafij.tafus, People, umidb
dn: authorizedService=mail(a)hh001.umidb,uid=tafij.tafus,ou=People,dc=umidb
uid: tafij.tafus@mail
authorizedService: mail(a)hh001.umidb
# tafij.tafus(a)hh001.umidb, mail(a)hh001.umidb, tafij.tafus, People, umidb
dn: uid=tafij.tafus@hh001.umidb,authorizedService=mail@hh001.umidb,uid=tafij.t
afus,ou=People,dc=umidb
authorizedService: mail(a)hh001.umidb
uid: tafij.tafus(a)hh001.umidb
# search result
search: 2
result: 0 Success
2. search, though empty, but works with filter: (authorizedService=mail(a)hh001.um*)
# base <ou=People,dc=umidb> with scope subtree
# filter: (authorizedService=mail(a)hh001.um*)
# requesting: authorizedService uid
#
# search result
search: 2
result: 0 Success
3. search (expectedly) works with filter:
(authorizedService:caseIgnoreMatch:=mail@hh001.umidb)
# base <ou=People,dc=umidb> with scope subtree
# filter: (authorizedService:caseIgnoreMatch:=mail@hh001.umidb)
# requesting: authorizedService uid
#
# mail(a)hh001.umidb, tafij.tafus, People, umidb
dn: authorizedService=mail(a)hh001.umidb,uid=tafij.tafus,ou=People,dc=umidb
uid: tafij.tafus@mail
authorizedService: mail(a)hh001.umidb
# tafij.tafus(a)hh001.umidb, mail(a)hh001.umidb, tafij.tafus, People, umidb
dn: uid=tafij.tafus@hh001.umidb,authorizedService=mail@hh001.umidb,uid=tafij.t
afus,ou=People,dc=umidb
authorizedService: mail(a)hh001.umidb
uid: tafij.tafus(a)hh001.umidb
# search result
search: 2
result: 0 Success
4. search (unexpectedly) does not work at all with filter:
(authorizedService:caseIgnoreSubstringsMatch:=mail@hh001.umi*)
# base <ou=People,dc=umidb> with scope subtree
# filter: (authorizedService:caseIgnoreSubstringsMatch:=mail@hh001.umi*)
# requesting: authorizedService uid
#
ldap_search_ext: Bad search filter (-7)
so ... I'm again where I was ... schema patch is the kludge but still no other way to
get that search :(
--
Zeus V. Panchenko jid:zeus@im.ibs.dn.ua
IT Dpt., I.B.S. LLC GMT+2 (EET)