LDAP - Wild cards in LDAP filters fail for AD esp *

Author

Wild cards in LDAP filters fail for AD esp *

Vartak, Yash V

2008-05-07, 10:36 pm

Dist,

While working with Net::LDAP and AD I noticed that wild card

filter

((objectclass=user)(l=yokohama)(deptment
=marketing)(c=jp)(!(memberOF:
CN=JAP_EMP_Mktg_SEC,OU=Users&Groups,OU=JAP,DC=ALNIPPOE,DC=com)))

returns me right results

how ever below filter fails

((objectclass=user)(l=yokohama)(deptment
=marketing)(c=jp)(!(memberOF:
*JAP_EMP_Mktg*)))

Fails

The wild cards work well with other directories , except for Active
Directory , have others noticed this?

Yash Vartak
System Engineer
Neptune Orient Lines Ltd
Company Registration Number: 196800632D
Direct Tel: (65) 6371 4483
Fax: (65) 6371 6161
e-mail: Yash_Vartak@apl.com
Website: http://www.nol.com.sg <http://www.nol.com.sg>

This message is intended for the recipient(s) named above. It may
contain confidential or privileged information. If you are not the
intended recipient, please notify the sender immediately by replying to
this message and then delete it from your system. Do not copy, use or
circulate this communication. Thank you.

Clément OUDOT

2008-05-08, 5:35 am

Vartak, Yash V a écrit :
> Dist,
>
> While working with Net::LDAP and AD I noticed that wild card
>
> filter
>
> ((objectclass=user)(l=yokohama)(deptment
=marketing)(c=jp)(!(memberOF:
> CN=JAP_EMP_Mktg_SEC,OU=Users&Groups,OU=JAP,DC=ALNIPPOE,DC=com)))
>
> returns me right results
>
> how ever below filter fails
>
> ((objectclass=user)(l=yokohama)(deptment
=marketing)(c=jp)(!(memberOF:
> *JAP_EMP_Mktg*)))
>
> Fails
>
> The wild cards work well with other directories , except for Active
> Directory , have others noticed this?
>

Filter rules are schema dependent. To use wildcard, you shoud have a
substring matching rule for your attribute. Maybe Active Directory does
not have it on 'memberOf'.

--
Clément OUDOT
http://coudot.blogs.linagora.com/

Sponsored Links