On 3/2/04 5:28 pm, Squibb Stuart <[EMAIL PROTECTED]> wrote: > Dear all, > > I'm a little out of my depth here. > > Microsoft documentation claims that including > > useraccountcontrol:1.2.840.113556.1.4.803:=2 > > in an LDAP search filter will identify disable Active Directory accounts. This > seems to work usng their own, and other third party utilities, but I can't > seems to make it work with perl-ldap. I'm simply adding the > useraccountcontrol:1.2.840.113556.1.4.803:=2 as an additional attribute in my > (already working) search filter and I'm getting LDAP_OPERATIONS_ERROR back > from the server.
If you can set $ldap->debug(15) and then do the search operation, can you send us the encoded searchrequest? It may be that Net::LDAP::Filter is barfing on the extensibleMatch. Cheers, Chris
