[jira] [Commented] (DIRSERVER-1961) Searches wth Object level scope and non-existing attribute assertion in filter are not working

["Emmanuel Lecharny (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/DIRSERVER-1961?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13912893#comment-13912893 ] 

Emmanuel Lecharny commented on DIRSERVER-1961:
----------------------------------------------

There is a double problem. In DefaultSearchEngine, line 205, we do :

                optimizer.annotate( filter );
                evaluator = evaluatorBuilder.build( filter );

                // Special case if the filter selects no candidate
                if ( ( evaluator == null ) || ( evaluator instanceof EmptyEvaluator ) ) // <<<----------------- Here
                {
                    ScopeNode node = new ScopeNode( aliasDerefMode, effectiveBase, effectiveBaseId, scope );
                    evaluator = new BaseLevelScopeEvaluator<Entry>( db, node );
                }

When we have no candidate, we will get an EmptyEvaluator, and in this case, we return a BaseLevelScopeEvaluator, which will return an entry when doing a search. Obviously, this is not what we would expect.

So if we change the test to return an EmptyEvaluator (the expected return), we have another issue. The IllegalModificationIT.testIllegalModify2() test will fail when using the LDAPSdk API (note that the same test works when used with the KDAP API). The reason is that the LDAPSdk send this filter : (|(objectClass=*)(objectClass=ldapsubentry))

In the NormalizationInterceptor, we do a removeObjectClass( ExprNode ) which will remove the (ObjectClass=*) filter, as this will select all the candidates. Sadly, when we have a OR filter, we don't evaluate the filter as always successful (here, we get (objectClass=ldapsubentry)  as the remaining filter, which will only select a few entries, if any, when it should be discarded).

So there is a bug in the removeObjectClass() method which has to be fixed. The way to fix that would be to modify the way we manage OR and NOT filters :
- if a NOT filter has an (ObjectClass=*) as one of its element, we should replace the whole NotNode to a UndefinedNode.
- if an AND filter has an (ObjectClass=*) as one of its element, we can simply remove it
- if an OR filter has an (ObjectClass=*) as one of its element, we should replace the OrNode by a ScopeNode

> Searches wth Object level scope and non-existing attribute assertion in filter are not working 
> -----------------------------------------------------------------------------------------------
>
>                 Key: DIRSERVER-1961
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1961
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 2.0.0-M15
>            Reporter: Kiran Ayyagari
>            Assignee: Kiran Ayyagari
>            Priority: Blocker
>             Fix For: 2.0.0-M16
>
>
> To reproduce perform the below search
> ldapsearch -H ldap://localhost:10389 -x -D "uid=admin,ou=system" -w secret -b "ou=schema" -s base "(objectClass=person)" "*"
> Expected: should not return any entries.
> Actual: returns ou=schema entry.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)