[email protected] wrote: > Quanah Gibson-Mount wrote: >> --On Tuesday, September 1, 2020 11:18 AM +0000 chrichardso27(a)gmail.com >> wrote: >> >>> >>> "(&(objectClass=someClass)(abc=cn=foo,dc=bar,cn=server,ou=system,cn=direc >>> tory,dc=example,dc=org))" >> >> foo and bar are the actual real values? dc=example,dc=org is your domain? > > The depth is the same, the values are different from the actual that we use. > I cannot share the actual values without disclosing internal details.
There's not a lot we can do without being able to reproduce the issue and see what's going on. You could try starting with a mostly empty DB, adding just the offending value, looking at the filter debug output for a lookup on that, and see if it looks sensible first. is the attribute abc=foo actually unique, or are there multiple occurrences of it in the DB? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/
