Uploaded image for project: 'Directory ApacheDS'
  1. Directory ApacheDS
  2. DIRSERVER-1922

Not Operator in Ldap Filter on Indexed Attributes

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.0.0-M15
    • Fix Version/s: 2.0.0-M16
    • Component/s: None
    • Labels:
      None
    • Environment:
      Debian Linux OpenJDK 7

      Description

      Launch ApacheDS freshly downloaded from Website. Create a user in dc=example,dc=com

      dn: uid=test,dc=example,dc=com
      objectClass: inetOrgPerson
      objectClass: organizationalPerson
      objectClass: person
      objectClass: top
      cn: test
      sn: test
      uid: test

      Perform a search with filter (!(uid=quak)).
      Perform a search with filter (!(sn=quak)).

      First search yields no result. Second yields 2 results. Uid is indexed, sn is not.

      This behavior is a bit annoying, because some Linux NSLCD implementation use the LDAP Filter (&(objectClass=posixAccount)(!(|(uidNumber=0)(gidNumber=0)))). If you have an index on either uidNumber or gidNumber it won't work anymore, if you don't have the root user in your directory.

        Attachments

          Activity

            People

            • Assignee:
              akiran Kiran Ayyagari
              Reporter:
              michael_simon Michael Simon
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: