Perhaps you should give some actual examples of the DIT and some queries via ldapsearch. That may help. :)
-- Dustin Puryear President and Sr. Consultant Puryear Information Technology, LLC 225-706-8414 x112 http://www.puryear-it.com Author, "Best Practices for Managing Linux and UNIX Servers" http://www.puryear-it.com/pubs/linux-unix-best-practices/ Agarwal, Sharad wrote: > Thanks Adam. > > My apologies, I should have been more clear on that front. Both the > searchBase and bind information is valid. The only thing out of order > (if we can call it that) is that the search is for something that does > not exist. Put another way, we are searching for an item that does not > exist in the searchBase. > > If the standard behavior for an LDAP server is to NOT give an error, can > you please point me to an authoritative source that I could cite to the > LDAP administrators? > > Thanks, > Sharad > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Adam > Tauno Williams > Sent: Wednesday, October 15, 2008 11:04 AM > To: [email protected] > Subject: [ldap] Re: LDAP Error 32 v/s Empty Result Set > >> Is it standard behavior for an LDAP server to respond with (LDAP Error >> 32) when a query is run that has no match? > > I suppose, if the specified searchBase does not exist or potentially if > the simple bind fails (the latter isn't "correct" AFAIK, but I've seen > it in the wild). > >> I tried a zero result query with the embedded LDAP Server (that comes >> with WebLogic). This query does not return LDAP Error 32, it just >> returns an empty result set. >> >> Code snippet: >> ~~~~ >> int ldapVersion = LDAPConnection.LDAP_V3; >> int ldapPort = 27001; >> String ldapHost = "fesbosbgdd33v3"; >> String loginDN = >> "uid=vgnadmin,ou=people,ou=VgnLDAPRealm,dc=vgndomain"; >> String password = "password masked"; >> String searchBase = "ou=groups,ou=VgnLDAPRealm,dc=vgndomain"; >> String searchFilter = >> > "(&(uniquemember=cn=Administrators,ou=groups,ou=VgnLDAPRealm,dc=vgndomai >> n)(objectclass=groupOfUniqueNames))"; >> ~~~~ >
