On Fri, Oct 20, 2017 at 01:08:01PM +0300, Zeus Panchenko wrote: > 1. search works with filter: ([email protected]) > (and without index it returns empty result)
That is odd. Th eindex should only be a performance thing - it should not change the results at all. You need to be very careful about using slapindex whenever you change the list of indexes. > 4. search (unexpectedly) does not work at all with filter: > (authorizedService:caseIgnoreSubstringsMatch:[email protected]*) > > # base <ou=People,dc=umidb> with scope subtree > # filter: (authorizedService:caseIgnoreSubstringsMatch:[email protected]*) > # requesting: authorizedService uid > # > > ldap_search_ext: Bad search filter (-7) That surprised me, so I asked around at LDAPCon today. Howard points out that '*' is not encoded on the wire: it just triggers a specific search form - in this case sub-initial. It may be that you cannot request sub-initial or sub-final with this syntax :-( Try this: (authorizedService:caseIgnoreSubstringsMatch:[email protected]) The idea is that it should trigger an 'any substring' (i.e. 'contains') search. Andrew -- ----------------------------------------------------------------------- | From Andrew Findlay, Skills 1st Ltd | | Consultant in large-scale systems, networks, and directory services | | http://www.skills-1st.co.uk/ +44 1628 782565 | -----------------------------------------------------------------------
