https://bugs.openldap.org/show_bug.cgi?id=10432

          Issue ID: 10432
           Summary: filter with typo'ed attribute name causes 0 results
           Product: OpenLDAP
           Version: 2.6.7
          Hardware: x86_64
                OS: Linux
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: slapd
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

Here is a filter for posixAccount entries missing the sshPublicKey attribute:

```
(&(objectClass=posixAccount)(!(sshPublicKey=*)))
```

It works normally.

If I made a typo and instead searched for entries missing some other bogus
attribute name:

```
(&(objectClass=posixAccount)(!(ssshPublicKey=*)))
```

I get 0 results.

None of my posixAccounts have an `ssshPublicKey` attribute, so I would think
that the right half of my filter should be always true. So every posixAccount
should be returned. Am I wrong to think that?

Note: the `!(foo=*)` syntax comes from
[stackoverflow](https://stackoverflow.com/questions/14441529/ldap-filter-for-blank-empty-attribute)

-- 
You are receiving this mail because:
You are on the CC list for the issue.

Reply via email to