You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by LAFEUILLADE Paul <pl...@softwaymedical.fr> on 2010/08/16 14:15:16 UTC
filter
Hi
I try to use the filter in a java software but the filter like "ou:dn:=active" doesn't work
Somebody knows how make a filter on the dn of a people?
Thanks in advance
--
This email was Anti Virus checked by Astaro Security Gateway. http://www.astaro.com
Re: filter
Posted by Emmanuel Lécharny <el...@apache.org>.
On 8/16/10 3:57 PM, LAFEUILLADE Paul wrote:
> I try to do the first if, look if a person belong to an ou.
Basically, you can define a baseDN for such a purpose.
ExtensibleMatchingRule filters are quite exotic...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
RE: filter
Posted by LAFEUILLADE Paul <pl...@softwaymedical.fr>.
I try to do the first if, look if a person belong to an ou.
I tell to my boss that is not possible (yet) on ADS
-----Message d'origine-----
De : Emmanuel Lécharny [mailto:elecharny@apache.org]
Envoyé : lundi 16 août 2010 15:55
Cc : users@directory.apache.org
Objet : Re: filter
On 8/16/10 3:24 PM, LAFEUILLADE Paul wrote:
> So I can't filter on the dn because to make this I can only use extensibleMatchingRule???
Let me extrapolate.
*if* what you want to do is to find an entry in the DIT when the entry's
DN contains some specific attributeType and value, like :
entry1 : cn=john doe,ou=people,dc=acme,dc=com
entry2 : cn=john doe,ou=robot,dc=acme,dc=com
with the following filter :
(&(ou:dn:=people)(cn=john doe))
then you won't find any entry using this request, while you would have
expected to get entry1 only (because entry2's dn does not contain ou=people)
Now, *if* what you want to do is to find an entry which has one
Attribute's value contaning a specific D, that's another story.
Suppose that you have such an entry :
dn: cn=test,ou=Groups,dc=acme,dc=com
objectClass: groupOfUniqueNames
objectClass: top
cn: test
uniqueMember: uid=jdoe1,ou=People,dc=acme,dc=com
uniqueMember: uid=jdoe2,ou=People,dc=acme,dc=com
uniqueMember: uid=jane,ou=People,dc=acme,dc=com
uniqueMember: uid=john,ou=People,dc=acme,dc=com
then a filter like (uniqueMember=uid=ja*) will give you back the entry,
while (uniqueMember=uid=k*) will not find it.
Not sure what kind of search you really want to do though... If you
could be a bit more explicit, that could help...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: filter
Posted by Emmanuel Lécharny <el...@apache.org>.
On 8/16/10 3:24 PM, LAFEUILLADE Paul wrote:
> So I can't filter on the dn because to make this I can only use extensibleMatchingRule???
Let me extrapolate.
*if* what you want to do is to find an entry in the DIT when the entry's
DN contains some specific attributeType and value, like :
entry1 : cn=john doe,ou=people,dc=acme,dc=com
entry2 : cn=john doe,ou=robot,dc=acme,dc=com
with the following filter :
(&(ou:dn:=people)(cn=john doe))
then you won't find any entry using this request, while you would have
expected to get entry1 only (because entry2's dn does not contain ou=people)
Now, *if* what you want to do is to find an entry which has one
Attribute's value contaning a specific D, that's another story.
Suppose that you have such an entry :
dn: cn=test,ou=Groups,dc=acme,dc=com
objectClass: groupOfUniqueNames
objectClass: top
cn: test
uniqueMember: uid=jdoe1,ou=People,dc=acme,dc=com
uniqueMember: uid=jdoe2,ou=People,dc=acme,dc=com
uniqueMember: uid=jane,ou=People,dc=acme,dc=com
uniqueMember: uid=john,ou=People,dc=acme,dc=com
then a filter like (uniqueMember=uid=ja*) will give you back the entry,
while (uniqueMember=uid=k*) will not find it.
Not sure what kind of search you really want to do though... If you
could be a bit more explicit, that could help...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
RE: filter
Posted by LAFEUILLADE Paul <pl...@softwaymedical.fr>.
So I can't filter on the dn because to make this I can only use extensibleMatchingRule???
Thanks for your time
-----Message d'origine-----
De : Emmanuel Lécharny [mailto:elecharny@apache.org]
Envoyé : lundi 16 août 2010 15:24
À : users@directory.apache.org
Objet : Re: filter
On 8/16/10 2:54 PM, LAFEUILLADE Paul wrote:
> Because I try to make a software which works independently of the ldap server ;).
Ahhh ! Makes sense then...
> I try openLdap and it works, now I try on apache directory server and I don't find how I can filter on the dn, so I ask on the apache directory list.
So, no, ADS does not support extensibleMatchingRule filter atm...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: filter
Posted by Emmanuel Lécharny <el...@apache.org>.
On 8/16/10 2:54 PM, LAFEUILLADE Paul wrote:
> Because I try to make a software which works independently of the ldap server ;).
Ahhh ! Makes sense then...
> I try openLdap and it works, now I try on apache directory server and I don't find how I can filter on the dn, so I ask on the apache directory list.
So, no, ADS does not support extensibleMatchingRule filter atm...
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
RE: filter
Posted by LAFEUILLADE Paul <pl...@softwaymedical.fr>.
Because I try to make a software which works independently of the ldap server ;).
I try openLdap and it works, now I try on apache directory server and I don't find how I can filter on the dn, so I ask on the apache directory list.
-----Message d'origine-----
De : Emmanuel Lécharny [mailto:elecharny@apache.org]
Envoyé : lundi 16 août 2010 14:52
À : users@directory.apache.org
Objet : Re: filter
On 8/16/10 2:28 PM, LAFEUILLADE Paul wrote:
> No, i didn't try this in ADS, yet, in open ldap.
> So I can't filter on the dn?
Why don't you ask on the OpenLDAP list ? They probably will have an more
accurate response...
If I have a Android phone, I don't ask Apple about some feature that
does not seems to work on my phone ;)
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: filter
Posted by Emmanuel Lécharny <el...@apache.org>.
On 8/16/10 2:28 PM, LAFEUILLADE Paul wrote:
> No, i didn't try this in ADS, yet, in open ldap.
> So I can't filter on the dn?
Why don't you ask on the OpenLDAP list ? They probably will have an more
accurate response...
If I have a Android phone, I don't ask Apple about some feature that
does not seems to work on my phone ;)
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
RE: filter
Posted by LAFEUILLADE Paul <pl...@softwaymedical.fr>.
No, i didn't try this in ADS, yet, in open ldap.
So I can't filter on the dn?
-----Message d'origine-----
De : Emmanuel Lecharny [mailto:elecharny@gmail.com]
Envoyé : lundi 16 août 2010 14:28
À : users@directory.apache.org
Objet : Re: filter
On 8/16/10 2:15 PM, LAFEUILLADE Paul wrote:
> Hi
> I try to use the filter in a java software but the filter like "ou:dn:=active" doesn't work
> Somebody knows how make a filter on the dn of a people?
> Thanks in advance
I guess you are trying this filter in ADS. We don't support
extensibleMatch filters yet.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: filter
Posted by Emmanuel Lecharny <el...@gmail.com>.
On 8/16/10 2:15 PM, LAFEUILLADE Paul wrote:
> Hi
> I try to use the filter in a java software but the filter like "ou:dn:=active" doesn't work
> Somebody knows how make a filter on the dn of a people?
> Thanks in advance
I guess you are trying this filter in ADS. We don't support
extensibleMatch filters yet.
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com