Hi, On Sunday, 22. April 2012, Alexei Znamensky wrote: > it looks like a problem to me, but I might be wrong. It seems > that Net::LDAP::FilterMatch doesn't cope with filters of the type: > > (dn=*) > (dn=cn=joe doe,ou=somewhere)
DN is not an attribute, it is the object's name. These filters are illegal. LDAP RFCs do not define filters with DN on the left hand side. > but it does work neatly if I write them like this: > > (distinguishedName=*) > (distinguishedName=cn=joe doe,ou=somewhere) distinguishedName is a legal LDAP attribute. These are legal filters. > [...] > Am I missing something here? The filters using DN would fail on a standard LDAP server too. Net::LDAP::FilterMatch behaves correctly. Best PEter -- Peter Marschall pe...@adpm.de
