Re: [Freeipa-users] confused by ldapsearch results

2015-05-21 Thread Ludwig Krispenz
On 05/21/2015 07:50 AM, Martin Kosek wrote: On 05/20/2015 04:01 PM, Boyce, George Robert. (GSFC-762.0)[NICS] wrote: This worked for me: $ ldapsearch -LLL -Y GSSAPI -b cn=users,cn=accounts,dc=example,dc=cm (|(uid=admin)(name=admin)) dn SASL/GSSAPI authentication started SASL username:

Re: [Freeipa-users] confused by ldapsearch results

2015-05-21 Thread Boyce, George Robert. (GSFC-762.0)[NICS]
Knowing that the first issue is 'working as designed', I can now focus on exactly how to fix it. In my case, the issue is that a vendor's code is appending name=... to its search filter to find a user group. Thanks, I can troubleshoot the second issue, it isn't a roadblock to my task. On

Re: [Freeipa-users] confused by ldapsearch results

2015-05-20 Thread Martin Kosek
On 05/20/2015 04:01 PM, Boyce, George Robert. (GSFC-762.0)[NICS] wrote: This worked for me: $ ldapsearch -LLL -Y GSSAPI -b cn=users,cn=accounts,dc=example,dc=cm (|(uid=admin)(name=admin)) dn SASL/GSSAPI authentication started SASL username: ad...@example.com SASL SSF: 56 SASL data

Re: [Freeipa-users] confused by ldapsearch results

2015-05-19 Thread Rob Crittenden
Boyce, George Robert. (GSFC-762.0)[NICS] wrote: I don’t understand what is happening… If I use a compound OR filter to search for “cn” or “uid”, I only get back the match for uid. I expect to get both. If I add a search for a nonexistent attribute like “name”, I get nothing back. I expect to

Re: [Freeipa-users] confused by ldapsearch results

2015-05-19 Thread Rich Megginson
On 05/19/2015 01:53 PM, Boyce, George Robert. (GSFC-762.0)[NICS] wrote: I don’t understand what is happening… If I use a compound OR filter to search for “cn” or “uid”, I only get back the match for uid. I expect to get both. If I add a search for a nonexistent attribute like “name”, I get

[Freeipa-users] confused by ldapsearch results

2015-05-19 Thread Boyce, George Robert. (GSFC-762.0)[NICS]
I don't understand what is happening... If I use a compound OR filter to search for cn or uid, I only get back the match for uid. I expect to get both. If I add a search for a nonexistent attribute like name, I get nothing back. I expect to get back the entry matched by the other term. # l