[DIRSERVER-1727] LDAP Searches against boolean attributes with booleanMatch equality never return matches

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-M6
• Fix Version/s: 2.0.0-M8
• Assignee: Unassigned
• Reporter: Richard Lowden
• Created: 16/May/12 15:37
• Updated: 03/Oct/12 03:31
• Resolved: 03/Oct/12 03:31

Description

If you carry out a search trying to match on a boolean attribute (syntax: 1.3.6.1.4.1.1466.115.121.1.7) and an equality matching rule of booleanMatch then searching for classes with the attribute value equalling TRUE or FALSE never return results.

Changing the equality matching rule on the attribute to caseIgnoreMatch will return results.

Used to work in 1.5.7 but no longer works in 2.0.0-M6.

To recreate try searching ober the ou=config entry for "ads-enabled = TRUE" as per the example below from the search logs, which should return "ads-directoryServiceId=default,ou=config" but returns no results.

#!SEARCH REQUEST (667) OK
#!CONNECTION ldap://localhost:10389
#!DATE 2012-05-16T16:34:51.265

1. LDAP URL : ldap://localhost:10389/ou=config?objectClass?sub?(ads-enabled=TRUE)
2. command line : ldapsearch -H ldap://localhost:10389 -x -D "uid=admin,ou=system" -W -b "ou=config" -s sub -a always -z 1000 "(ads-enabled=TRUE)" "objectClass"
3. baseObject : ou=config
4. scope : wholeSubtree (2)
5. derefAliases : derefAlways (3)
6. sizeLimit : 1000
7. timeLimit : 0
8. typesOnly : False
9. filter : (ads-enabled=TRUE)
10. attributes : objectClass

#!SEARCH RESULT DONE (667) OK
#!CONNECTION ldap://localhost:10389
#!DATE 2012-05-16T16:34:51.265

1. numEntries : 0