[DIRSERVER-715] Unable to match entry by X.509 certificate

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0-RC3
• Fix Version/s: 1.0-RC4, 1.5.0
• Component/s: ldap
• Environment: Windows XP, Intel Pentium 4
• Assignee: Alex Karasulu
• Reporter: Nikola Goran Cutura
• Created: 23/Aug/06 10:12
• Updated: 04/Sep/06 19:08
• Resolved: 27/Aug/06 08:07

Description

There is an entry containing valid X.509 certificate. When I attempt to find that entry by that certificate, search fails. There are two variants of search: one uses 'userCrtificate' attribute name and the other uses 'userCrtificate;certificate' attribute name ('binary' may be specified instead of 'certiifcate' - no change). Attached are log files produced in each of the search attempts.

Case 1:

Java statement:
NamingEnumeration results = ctx.search("ou=users,o=ActiveMQ,dc=example,dc=com", "userCertificate =

{0}", new Object[] {cert}, constraints);

produces log as in file ' no-binary.log'

Case 2:

Java statement:
NamingEnumeration results = ctx.search("ou=users,o=ActiveMQ,dc=example,dc=com", "userCertificate;binary = {0}

", new Object[]

{cert}

, constraints);

produces log as in file 'with-binary.log'

Issue Links

• relates to: DIRSERVER-169 Incorrect SearchResult name and "compare" failure using CoreContextFactory