All groups for users

[Sumanth Kadaba <su...@gmail.com>]

Hello,

I am using apacheds-1.5.7-x86_64.rpm on a RHEL 6.3
I have a scenario where we have
1\ Super_Group
2\ Group_A, Group_B - These belong to the Super_Group
3\ User_A, User_B belong to Group_A, Group_B and so on...

I followed few guides and ended up using
filter (member:1.2.840.113556.1.4.1941:=%v)
where I replace the %v with the user dn and so the end filter will look
like:

*(member:1.2.840.113556.1.4.1941:=cn=User_A,ou=users,dc=test,dc=lan)*

I was able to successfully search with Windows Active Directory
and got Group_A, Super_Group as groups for User_A
but when I applied the same principle with Apache DS

1\ Using the Apache Studio client I was not able to retrieve any records 0
records

2\ From the code:
javax.naming.NamingException: [LDAP: error code 80 - OTHER: failed for
SearchRequest
        baseDn : 'DC=test,DC=lan'
        filter :
'(|:[9223372036854775807](2.5.4.31-false-EXTENSIBLE-1.2.840.113556.1.4.1941-'0x63
0x6E 0x3D 0x53 0x49 0x43 0x20 0x55 0x73 0x65 0x72 0x2C 0x6F 0x75 0x3D 0x75
...':[9223372036854775807])(2.5.4.0=referral:[0]))'
        scope : whole subtree
        typesOnly : false
        Size Limit : no limit
        Time Limit : no limit
        Deref Aliases : deref Always
        attributes :
: N O T   I M P L E M E N T E D   Y E T !]; remaining name ''
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown
Source)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown
Source)
at javax.naming.directory.InitialDirContext.search(Unknown Source)

Also, in the Studio client, *1.2.840.113556.1.4.1941 *is not recognized? I
do not see it when I use the filter editor.

Any pointers towards the right direction will help me.

Thanks,
Sumanth

Re: All groups for users

[Emmanuel Lécharny <el...@gmail.com>]

Le 23/06/2014 14:36, Sumanth Kadaba a écrit :
> Hello,
Hi,
>
> I am using apacheds-1.5.7-x86_64.rpm on a RHEL 6.3
> I have a scenario where we have
> 1\ Super_Group
> 2\ Group_A, Group_B - These belong to the Super_Group
> 3\ User_A, User_B belong to Group_A, Group_B and so on...
>
> I followed few guides and ended up using
> filter (member:1.2.840.113556.1.4.1941:=%v)
> where I replace the %v with the user dn and so the end filter will look
> like:
>
> *(member:1.2.840.113556.1.4.1941:=cn=User_A,ou=users,dc=test,dc=lan)*

We don't support (yet) matchingrule assertions in filters...