Hi!
I'm getting exceptions when trying to query the groups a user belongs to. I'm
using groupOfUniqueNames to represent the groups, so I have to search for all
elements where uniqueMember matches the user's DN.
This is my query:
(uniqueMember=uid=figaro,ou=users,o=infinica)
(I've tried escaping all the "=" and "," after uid, but it makes no difference)
The query succeeds if the base DN I'm using doesn't contain any
groupOfUniqueNames entries. But as soon as those are available, regardless of
whether the uniqueMember attribute actually matches, I get the following
exception (copied from Directory Studio; I don't know why it displays the error
message in German):
Fehler während des Suchvorgangs
- [LDAP: error code 80 - OTHER: failed for SearchReques
javax.naming.NamingException: [LDAP: error code 80 - OTHER: failed for
SearchRequest
baseDn : '2.5.4.11=test,2.5.4.10=infinica'
filter :
'(|:[9223372036854775807](2.5.4.50=uid=figaro,ou=users,o=infinica:[9223372036854775807])(2.5.4.0=referral:[9223372036854775807]))'
scope : whole subtree
typesOnly : false
Size Limit : 1000
Time Limit : no limit
Deref Aliases : deref Always
attributes : 'cn', 'objectclass'
: null]; remaining name 'ou=test,o=infinica'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)
at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown
Source)
at
org.apache.directory.studio.connection.core.io.jndi.JNDIConnectionWrapper$1.run(JNDIConnectionWrapper.java:356)
at
org.apache.directory.studio.connection.core.io.jndi.JNDIConnectionWrapper.runAndMonitor(JNDIConnectionWrapper.java:1272)
at
org.apache.directory.studio.connection.core.io.jndi.JNDIConnectionWrapper.checkConnectionAndRunAndMonitor(JNDIConnectionWrapper.java:1203)
at
org.apache.directory.studio.connection.core.io.jndi.JNDIConnectionWrapper.search(JNDIConnectionWrapper.java:398)
at
org.apache.directory.studio.ldapbrowser.core.jobs.SearchRunnable.search(SearchRunnable.java:500)
at
org.apache.directory.studio.ldapbrowser.core.jobs.SearchRunnable.searchAndUpdateModel(SearchRunnable.java:320)
at
org.apache.directory.studio.ldapbrowser.core.jobs.SearchRunnable.run(SearchRunnable.java:184)
at
org.apache.directory.studio.connection.core.jobs.StudioConnectionJob.run(StudioConnectionJob.java:114)
at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55)
[LDAP: error code 80 - OTHER: failed for SearchRequest
baseDn : '2.5.4.11=test,2.5.4.10=infinica'
filter :
'(|:[9223372036854775807](2.5.4.50=uid=figaro,ou=users,o=infinica:[9223372036854775807])(2.5.4.0=referral:[9223372036854775807]))'
scope : whole subtree
typesOnly : false
Size Limit : 1000
Time Limit : no limit
Deref Aliases : deref Always
attributes : 'cn', 'objectclass'
: null]
Perhaps my query is wrong, but I don't see why. Apparently there was a bug with
uniqueMember queries in ApacheDS, but according to Jira, it's been fixed since
2007.
Please advise,
Marian.