Wild cards in LDAP filters fail for AD esp *

Dist,

While working with Net::LDAP and AD I noticed that wild card 

filter

 ((objectclass=user)(l=yokohama)(deptment
=marketing)(c=jp)(!(memberOF:
CN=JAP_EMP_Mktg_SEC,OU=Users&Groups,OU=JAP,DC=ALNIPPOE,DC=com)))

returns me right results

how ever below filter fails

 ((objectclass=user)(l=yokohama)(deptment
=marketing)(c=jp)(!(memberOF:
*JAP_EMP_Mktg*)))

Fails 

The wild cards work well with other directories , except for Active
Directory , have others noticed this?

Yash Vartak
System Engineer 
Neptune Orient Lines Ltd 
Company Registration Number: 196800632D 
Direct Tel: (65) 6371 4483 
Fax: (65) 6371 6161
e-mail: Yash_Vartak@apl.com 
Website: http://www.nol.com.sg <http://www.nol.com.sg>  

This message is intended for the recipient(s) named above.  It may
contain confidential or privileged information.  If you are not the
intended recipient, please notify the sender immediately by replying to
this message and then delete it from your system.  Do not copy, use or
circulate this communication.  Thank you.

 

Vartak, Yash V a écrit :
> Dist,
>
> While working with Net::LDAP and AD I noticed that wild card
>
> filter
>
>  ((objectclass=user)(l=yokohama)(deptment
=marketing)(c=jp)(!(memberOF:
> CN=JAP_EMP_Mktg_SEC,OU=Users&Groups,OU=JAP,DC=ALNIPPOE,DC=com)))
>
> returns me right results
>
> how ever below filter fails
>
>  ((objectclass=user)(l=yokohama)(deptment
=marketing)(c=jp)(!(memberOF:
> *JAP_EMP_Mktg*)))
>
> Fails
>
> The wild cards work well with other directories , except for Active
> Directory , have others noticed this?
>

Filter rules are schema dependent. To use wildcard, you shoud have a
substring matching rule for your attribute. Maybe Active Directory does
not have it on 'memberOf'.

--
Clément OUDOT
http://coudot.blogs.linagora.com/