ADS version ? On Fri, Nov 27, 2009 at 1:36 PM, SCHEDENIG Marian <[email protected]> wrote: > Hi! > > I'm getting exceptions when trying to query the groups a user belongs to. I'm > using groupOfUniqueNames to represent the groups, so I have to search for all > elements where uniqueMember matches the user's DN. > > This is my query: > (uniqueMember=uid=figaro,ou=users,o=infinica) > > (I've tried escaping all the "=" and "," after uid, but it makes no > difference) > > The query succeeds if the base DN I'm using doesn't contain any > groupOfUniqueNames entries. But as soon as those are available, regardless of > whether the uniqueMember attribute actually matches, I get the following > exception (copied from Directory Studio; I don't know why it displays the > error message in German): > > Fehler während des Suchvorgangs > - [LDAP: error code 80 - OTHER: failed for SearchReques > javax.naming.NamingException: [LDAP: error code 80 - OTHER: failed for > SearchRequest > baseDn : '2.5.4.11=test,2.5.4.10=infinica' > filter : > '(|:[9223372036854775807](2.5.4.50=uid=figaro,ou=users,o=infinica:[9223372036854775807])(2.5.4.0=referral:[9223372036854775807]))' > scope : whole subtree > typesOnly : false > Size Limit : 1000 > Time Limit : no limit > Deref Aliases : deref Always > attributes : 'cn', 'objectclass' > : null]; remaining name 'ou=test,o=infinica' > at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source) > at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source) > at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source) > at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source) > at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source) > at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown > Source) > at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown > Source) > at > org.apache.directory.studio.connection.core.io.jndi.JNDIConnectionWrapper$1.run(JNDIConnectionWrapper.java:356) > at > org.apache.directory.studio.connection.core.io.jndi.JNDIConnectionWrapper.runAndMonitor(JNDIConnectionWrapper.java:1272) > at > org.apache.directory.studio.connection.core.io.jndi.JNDIConnectionWrapper.checkConnectionAndRunAndMonitor(JNDIConnectionWrapper.java:1203) > at > org.apache.directory.studio.connection.core.io.jndi.JNDIConnectionWrapper.search(JNDIConnectionWrapper.java:398) > at > org.apache.directory.studio.ldapbrowser.core.jobs.SearchRunnable.search(SearchRunnable.java:500) > at > org.apache.directory.studio.ldapbrowser.core.jobs.SearchRunnable.searchAndUpdateModel(SearchRunnable.java:320) > at > org.apache.directory.studio.ldapbrowser.core.jobs.SearchRunnable.run(SearchRunnable.java:184) > at > org.apache.directory.studio.connection.core.jobs.StudioConnectionJob.run(StudioConnectionJob.java:114) > at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) > > [LDAP: error code 80 - OTHER: failed for SearchRequest > baseDn : '2.5.4.11=test,2.5.4.10=infinica' > filter : > '(|:[9223372036854775807](2.5.4.50=uid=figaro,ou=users,o=infinica:[9223372036854775807])(2.5.4.0=referral:[9223372036854775807]))' > scope : whole subtree > typesOnly : false > Size Limit : 1000 > Time Limit : no limit > Deref Aliases : deref Always > attributes : 'cn', 'objectclass' > : null] > > Perhaps my query is wrong, but I don't see why. Apparently there was a bug > with uniqueMember queries in ApacheDS, but according to Jira, it's been fixed > since 2007. > > Please advise, > Marian. > >
-- Regards, Cordialement, Emmanuel Lécharny www.iktek.com
