[DIRSERVER-1922] Not Operator in Ldap Filter on Indexed Attributes

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-M15
• Fix Version/s: 2.0.0-M16
• Environment: Debian Linux OpenJDK 7
• Assignee: Kiran Ayyagari
• Reporter: Michael Simon
• Created: 28/Nov/13 14:36
• Updated: 02/Dec/13 06:05
• Resolved: 28/Nov/13 17:01

Description

Launch ApacheDS freshly downloaded from Website. Create a user in dc=example,dc=com

dn: uid=test,dc=example,dc=com
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
cn: test
sn: test
uid: test

Perform a search with filter (!(uid=quak)).
Perform a search with filter (!(sn=quak)).

First search yields no result. Second yields 2 results. Uid is indexed, sn is not.

This behavior is a bit annoying, because some Linux NSLCD implementation use the LDAP Filter (&(objectClass=posixAccount)(!(|(uidNumber=0)(gidNumber=0)))). If you have an index on either uidNumber or gidNumber it won't work anymore, if you don't have the root user in your directory.