Multiple Filters in a Generic ldap Search.

Hi all,
'am involved in developing a generic ldap search utility. I would like to know if there is a provision to give multiple filters while searching the LDAP.
The scenario is like this,
like if i give the search criteria as java ldapSearch "empid=111*" I will get a series of results.
WHAT I WANT:
Will i be able to specify something like empid=11* and lastname=xxx*.
Any pointers on this would be of tremendous help.
Anticipating a reply.
Regards,
Sathya Sayee.S

You can use | as 'or condition'. For example the condition
sn=foo and (email=[email protected] or email=[email protected])
(&(sn=foo) (|(email=[email protected]) (email=[email protected]))
the operator are :
AND : &
OR : |
NOT : !
the notation works as HP calculator notation
Simon Pierre NOLIN

Similar Messages

Multiple LDAP search domain configuration

how do you set up multiple base dn settings for LDAP calls in LiveCycle es2

Hi Conor,
The below links could be helpful to you :-
Forum thread:
Re: Delegated User Search returns first 200 entries only...?
How-to guide:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f0747ac2-ffd9-2910-de9a-8a3dc44da8b4
SAP Library:
http://help.sap.com/saphelp_nw04s/helpdata/en/b1/6a55422f4d3830e10000000a155106/frameset.htm
Regards,
Anagha

LDAP Search Context filtering in Presence

Hi all,
I'm trying to reduce my contacts results in presence to users with the IPPHONE filed populated. Is there a way to do this in the LDAP search context field.
I'm able to do this in CUCM with custom filter. (&(objectCategory=user)(objectClass=user)(ipPhone=*))
thanks
Mal

Hi
Yep - I think you can.
See this thread where it's kind of hinted at near the end:
https://supportforums.cisco.com/thread/2009542
Also it's mentioned in the shoutbox section of this page, but the response by the man who knows has been edited out helpfully (search the page for filter):
http://htluo.blogspot.com/2009/01/ldap-integration-with-cups.html
Aaron

Multiple Filtering of Nested Data Set Spry

Hi,
I am trying to use multiple filters on a nested data set using Spry but it does not work, no matter how many times I've re-read the code and verified that I'm using the code the right way. What is going on?
When I use a single non-destructive filter (ie... ds.filter()) on the nested data set, the filter works beautifully. However, when I want to use multiple filters (I use ds.addFilter()), it looks like my filter function (FilterByState) is not being kicked off.
I linked to the appropriate files, SpryData.js, xpath.js, SpryNestedXMLDataSet.js and SpryDataExtensions.js. These are the latest version, 1.6.1.
Why will ds.filter work and not ds.addFilter? I haven't written the second filter code yet because this is stopping me from moving forward. Even though, I haven't written that, shouldn't addFilter work too?
Please help, this is driving me crazy.
Here is my code:
<script type="text/javascript">
     Spry.Utils.addLoadListener(function () {
          if (document.getElementById("stateSelect").selectedIndex != 0) {
               document.getElementById("stateSelect").selectedIndex = 0;
          if (document.getElementById("dateSelect").selectedIndex != 0) {
               document.getElementById("dateSelect").selectedIndex = 0;
     var dsTopics = new Spry.Data.XMLDataSet("compliance.xml", "compliance/subject", {useCache: false });
     var dsDocuments = new Spry.Data.NestedXMLDataSet(dsTopics, "doc");
     var dsDates = new Spry.Data.XMLDataSet("compliance.xml", "compliance/subject/doc/date", {useCache: false, subPaths: "@num", distinctOnLoad: true, distinctFieldsOnLoad: ['date'], sortOnLoad: "@num", sortOrderOnLoad:"ascending"});
     dsDates.setColumnType("@num", "number");
     var currentSelection;
     //var FilterByState;
     function showDocuments(currentIndex) {
          dsTopics.setCurrentRowNumber(currentIndex);
          document.getElementById("stateSelect").selectedIndex = 0;
          document.getElementById("dateSelect").selectedIndex = 0;
          dsDocuments.removeAllFilters(true);
     function ToggleFilter(selected, f) {
          chosenState = selected;
          if (selected != "") {
               alert("something's selected");
               dsDocuments.addFilter(f, true);
          else {
               alert("something is NOT selected");
               dsDocuments.removeFilter(f, true);
          //dsDocuments.applyFilters();
     var chosenState;
     var chosenDate;
     function FilterByState(ds, row, rowNumber) {
          alert("Filtering by state");
          var currentSelection = document.getElementById("stateSelect").options[chosenState];
          if (row["state"].search(currentSelection.value) != -1) {
               return row;
          else
               return null;
     function FilterByDate(ds, row, rowNumber) {
          var currentSelectedDate = document.getElementById("dateSelect").options[chosenDate];
          if (row["date"] == currentSelectedDate)
               return row;
          else
               return null;
</script>
<div class="articlePage articleContent">
     <h2 class="bodyCopyBold">Compliance Widget</h2>
     <form name="selectForm" action="">
          <div spry:region="dsTopics" id="topicSelector">
               <label for="topicSelect" class="dataLabel">Topic:</label>
               <select spry:repeatchildren="dsTopics" class="input" name="topicSelect" id="topicSelect" onchange="showDocuments(this.selectedIndex);">
                    <option spry:if="{ds_RowNumber} == {ds_CurrentRowNumber}" value="{name}" selected="selected">{name}</option>
                    <option spry:if="{ds_RowNumber} != {ds_CurrentRowNumber}" value="{name}">{name}</option>
               </select>
          </div>
          <label for="stateSelect" class="dataLabel">State:</label>
          <select class="input" name="stateSelect" id="stateSelect" onchange="ToggleFilter(this.selectedIndex, FilterByState);">
               <option value="" selected="selected">Please Select</option>
               <option value="All States">All States</option>
               <option value="AL">Alabama</option>
               <option value="AK">Alaska</option>
               <option value="AZ">Arizona</option>
               <option value="AR">Arkansas</option>
               <option value="CA">California</option>
               <option value="CO">Colorado</option>
               <option value="CT">Connecticut</option>
               <option value="DE">Delaware</option>
               <option value="DC">District of Columbia</option>
               <option value="FL">Florida</option>
               <option value="GA">Georgia</option>
               <option value="HI">Hawaii</option>
               <option value="ID">Idaho</option>
               <option value="IL">Illinois</option>
               <option value="IN">Indiana</option>
               <option value="IA">Iowa</option>
               <option value="KS">Kansas</option>
               <option value="KY">Kentucky</option>
               <option value="LA">Louisiana</option>
               <option value="ME">Maine</option>
               <option value="MD">Maryland</option>
               <option value="MA">Massachusetts</option>
               <option value="MI">Michigan</option>
               <option value="MN">Minnesota</option>
               <option value="MS">Mississippi</option>
               <option value="MO">Missouri</option>
               <option value="MT">Montana</option>
               <option value="NE">Nebraska</option>
               <option value="NV">Nevada</option>
               <option value="NH">New Hampshire</option>
               <option value="NJ">New Jersey</option>
               <option value="NM">New Mexico</option>
               <option value="NY">New York</option>
               <option value="NC">North Carolina</option>
               <option value="ND">North Dakota</option>
               <option value="OH">Ohio</option>
               <option value="OK">Oklahoma</option>
               <option value="OR">Oregon</option>
               <option value="PA">Pennsylvania</option>
               <option value="RI">Rhode Island</option>
               <option value="SC">South Carolina</option>
               <option value="SD">South Dakota</option>
               <option value="TN">Tennessee</option>
               <option value="TX">Texas</option>
               <option value="UT">Utah</option>
               <option value="VT">Vermont</option>
               <option value="VA">Virginia</option>
               <option value="WA">Washington</option>
               <option value="WV">West Virginia</option>
               <option value="WI">Wisconsin</option>
               <option value="WY">Wyoming</option>
          </select>
          <div spry:region="dsDates" id="dateSelector">
               <label for="dateSelect" class="dataLabel">Date:</label>
               <select class="input" name="dateSelect" id="dateSelect">
                    <option value="" selected="selected">Please Select</option>
                    <option spry:repeat="dsDates" value="{date}">{date}</option>
               </select>
          </div>
          <div class="spacer10"></div>
          <div id="documentListing" class="bodyCopy">
               <ul spry:region="dsDocuments" spry:detailregion="dsTopics" class="list2">
                    <li spry:repeat="dsDocuments">{title}</li>
               </ul>
          </div>
     </form>
Here is the xml:
<?xml version="1.0"?>
<compliance>
     <subject>
          <name>Agent Termination</name>
          <doc id="91000038">
               <title>Reminder: Agent Contract Termination Notification</title>
               <date num="200907">July 2009</date>
               <state>OR</state>
          </doc>
          <doc id="91000031">
               <title>Reminder: Agent Contract Termination Notification 2</title>
               <date num="200807">July 2008</date>
               <state>OR</state>
          </doc>
          <doc id="91000031">
               <title>Reminder: Agent Contract Termination Notification 2</title>
               <date num="201001">January 2010</date>
               <state>OR</state>
          </doc>
     </subject>
     <subject>
          <name>Agent Training</name>
          <doc id="91000034">
               <title>Oregon Agent Retraining</title>
               <date num="200908">August 2009</date>
               <state>OR</state>
          </doc>
          <doc id="91000060">
               <title>Multi-State Corrective Action Plan - Training Courses – BLN Changes</title>
               <date num="200902">February 2009</date>
               <state>All States</state>
          </doc>
          <doc id="91000062">
               <title>Required Training – Change for California Agents</title>
               <date num="200902">February 2009</date>
               <state>CA</state>
          </doc>
          <doc id="91000065">
               <title>Required Training - BCLIC Agents</title>
               <date num="200902">February 2009</date>
               <state>NY</state>
          </doc>
          <doc id="91000071">
               <title>Multi-State Corrective Action Plan - Training Courses – BLN Changes</title>
               <date num="200901">January 2009</date>
               <state>All States</state>
          </doc>
          <doc id="91000074">
               <title>Multi-State Corrective Action Plan - Training Courses – BLN Changes 2</title>
               <date num="200910">October 2009</date>
               <state>All States</state>
          </doc>
     </subject>
     <subject>
          <name>Agents Licenses</name>
          <doc id="91000064">
               <title>Georgia Agent Consent Orders</title>
               <date num="200902">February 2009</date>
               <state>GA</state>
          </doc>
          <doc id="91000066">
               <title>New York State Correction Law</title>
               <date num="200902">February 2009</date>
               <state>NY</state>
          </doc>
     </subject>
     <subject>
          <name>DNC</name>
          <doc id="91000063">
               <title>States Prohibit Unsolicited Calls</title>
               <date num="200902">February 2009</date>
               <state>AL, LA, RI, UT</state>
          </doc>
     </subject>
     <subject>
          <name>LTC Partnership</name>
          <doc id="91000056">
               <title>Alabama Long Term Care and Long Term Care Partnership Compliance</title>
               <date num="200903">March 2009</date>
               <state>AL</state>
          </doc>
     </subject>
</compliance>
Thanks

Hi Marlene,
It isn't working right because you have a bug in your
onchange attribute for your select:
<select id="test"
onChange="ds1.setCurrentRow(this.selectedIndex);">
<option spry:repeat="ds1"
id="{ds_RowID}">{@id}</option>
</select>
setCurrentRow() takes a rowID not a rowNumber. The
"selectedIndex" of the select element is the equivalent of a row
number, so if you want to change the current row by row number then
use setCurrentRowNumber() instead:
<select id="test"
onChange="ds1.setCurrentRowNumber(this.selectedIndex);">
<option spry:repeat="ds1"
id="{ds_RowID}">{@id}</option>
</select>
After you make that change, you will see that things work as
expected.
--== Kin ==--

LDAP Search/Bind function

I'm trying to create an authentication function that can perform a search/bind.
The algorithm for this is as follows:
1) Bind to the LDAP server as the application (ie: admin username and password)
2) Search the LDAP directory for the sign-in username %userid%
3) Get the DN of that entry
4) Unbind as the application
5) Bind as the sign-in username %userid% with the DN from above
I'm pretty sure that this is possible with the DBMS_LDAP and DBMS_LDAP_UTL packages, but I'm not sure how to put it all together. Does anyone out there know if a function such as this already exists?
Thanks,
Logan

Well, I figured it out.
create or replace FUNCTION F_Authenticate (p_username in varchar2, p_password in varchar2)
      RETURN BOOLEAN
   IS
      CURSOR ldap_param_cur
      IS
         SELECT *
           FROM ldap_parameters;
      ldap_param_rec   ldap_param_cur%ROWTYPE;
      l_session        DBMS_LDAP.SESSION;
      l_srch_attr      DBMS_LDAP.STRING_COLLECTION;
      l_attr_values    DBMS_LDAP.STRING_COLLECTION;
      l_result         DBMS_LDAP.MESSAGE;
      l_entry          DBMS_LDAP.MESSAGE;
      l_dn             VARCHAR2 (200);
      l_retval         PLS_INTEGER;
      multiple_uid     EXCEPTION;
      no_ldap_entry    EXCEPTION;
   BEGIN
      -- get parameters from uvic_ldap_parameters table
      OPEN ldap_param_cur;
      FETCH ldap_param_cur
       INTO ldap_param_rec;
      -- if the cursor returns no records display error message and exit
      IF ldap_param_cur%NOTFOUND
      THEN
         DBMS_OUTPUT.PUT_LINE
             ( 'LDAP Parameters not configured in UVIC_LDAP_PARAMETERS table'
         CLOSE ldap_param_cur;
         RETURN FALSE;
      END IF;
      CLOSE ldap_param_cur;
      DBMS_LDAP.use_exception := TRUE;
      BEGIN
         -- open session to ldap server
         l_session :=
            DBMS_LDAP.init (ldap_param_rec.ldap_host,
                            ldap_param_rec.ldap_port
         -- bind with credentials from cursor
         l_retval :=
            DBMS_LDAP.simple_bind_s (l_session,
                                     ldap_param_rec.search_credential,
                                     ldap_param_rec.search_passwd
         -- run ldap search
         l_retval :=
            DBMS_LDAP.search_s (l_session,
                                ldap_param_rec.search_base,
                                DBMS_LDAP.SCOPE_SUBTREE,
                                ldap_param_rec.search_filter || p_username,
                                l_srch_attr,
                                0,
                                l_result
         -- count the search result records
         l_retval := DBMS_LDAP.count_entries (l_session, l_result);
         -- if multiple search result records raise exception
         -- the userid should be unique and only return 1 search record
         IF l_retval > 1
         THEN
            RAISE multiple_uid;
         ELSIF NVL (l_retval, 0) = 0
         THEN
            RAISE no_ldap_entry;
         END IF;
         -- select first entry from ldap search record
         l_entry := DBMS_LDAP.first_entry (l_session, l_result);
         -- get the distinguished name from the ldap record
         l_dn := DBMS_LDAP.get_dn (l_session, l_entry);
         -- close ldap session used to retrieve search results
         l_retval := DBMS_LDAP.unbind_s (l_session);
         -- open session to ldap server
         l_session :=
            DBMS_LDAP.init (ldap_param_rec.ldap_host,
                            ldap_param_rec.ldap_port);
         -- bind using ldap search results distinguished name and password
         -- if the bind is successful the user can login
         l_retval := DBMS_LDAP.simple_bind_s (l_session, l_dn, p_password);
         -- close ldap session
         l_retval := DBMS_LDAP.unbind_s (l_session);
         RETURN TRUE;
      EXCEPTION
         WHEN multiple_uid
         THEN
            l_retval := DBMS_LDAP.unbind_s (l_session);
            DBMS_OUTPUT.PUT_LINE('Multiple LDAP entries found.'
            RETURN FALSE;
         WHEN no_ldap_entry
         THEN
            l_retval := DBMS_LDAP.unbind_s (l_session);
            DBMS_OUTPUT.PUT_LINE ('No LDAP records found.'
            RETURN FALSE;
         WHEN OTHERS
         THEN
            l_retval := DBMS_LDAP.unbind_s (l_session);
            DBMS_OUTPUT.PUT_LINE ('LDAP Error. Unknown type.');
            RETURN FALSE;
      END;
   EXCEPTION
      WHEN OTHERS
      THEN
         l_retval := DBMS_LDAP.unbind_s (l_session);
         DBMS_OUTPUT.PUT_LINE ('LDAP Error. Unknown type.');
         RETURN FALSE;
   END F_Authenticate;

About Multiple Filters ?

This is my xml file. I Searched this page about http://labs.adobe.com/technologies/spry/samples/data_region/MultipleFiltersSample.html Multiple Filters, but in this sample, it's also inculde filter_out,
Now i want filter in, it's mean, in my xml file, i want use a checkbox, to keep '121212','979797' ,and filter out '545454', '525252'.
function Filter1(ds, row, index){ var c = row.Comp_ID.??????????????????? }; Any one can help me?
<Row>
<Comp_ID>121212</Comp_ID>
</Row>
<Row>
<Comp_ID>545454</Comp_ID>
</Row>
<Row>
<Comp_ID>979797</Comp_ID>
</Row>
<Row>
<Comp_ID>525252</Comp_ID>
</Row>

So, let me add the step to this that specifically is not working. Let's add to this the fact that to the Material of Truck, there are attached Warranties and Service Contracts (Truck is part of an equipment master). So, now I want all Red Trucks which have a Warranty expiring this month AND no Service Contract. To further explain, the equipment master has a Type (Truck), and either a Warranty or Contract attached to it (either, both, or neither). So I want to use the AND to identify Trucks that have no Warranty or and expiring one, AND Trucks that have no Service Contract. I only want Trucks that meet both conditions at the same time.
In our testing, we have found that using the AND with the KEEP functionality it works in all cases EXCEPT when someone owns more than one Truck. For example, lets say Bob owns two Trucks, one has no Warranty but a Service Contract, and the other Truck has a Warranty, but no Service Contract. In this case, Bob should not show up in the Target Group because he does not own a Truck that has no Warranty AND no Service Contract. However, because he shows up in the no Warranty target group for one Truck, and the no Service Contract target group for the other Truck, when you do a KEEP you get Bob in the final Target Group. Is there any way to find just Trucks that have both no Warranty and no Service Contract?
Thanks, Bryan

CS3: Unable to add multiple filters to FindFirstFile

Hi All,
Is anyone know, how to pass multiple filters to the function FindFirstFile. If I use "*.*" as a filter then it searches all fles and folders, but I am interested in search all images (like .png, .tiff, .ico, .gif, .jpeg).
Thanks,
Praveen Mamdge

Multiple effects are not supported in the current version of iPhoto for iOS.
See my response in this thread: https://discussions.apple.com/thread/3826301

Adding Another LDAP Search Attribute

Hi,
Can you please point me to any document for adding another ldap search attribute apart from uid.
Regards,
Edited by: IDM1312 on Jun 9, 2008 4:28 PM

Yes, here is what happens when your user tries to login:
They enter some username & password. The username can be any attribute you wish it to be (email, UID, cn, etc). The actual authentication is not done using the value the user enters. This is because you need to authenticate with the user's DN. To get the DN, access manager does a lookup on the directory server to see if what the user entered exists in any of the attributes in the search alias list. If the search is successful, it returns the user's DN. Access Manager then uses the DN and password to authenticate the user.
So, if you expect your users to enter their email address, you will want your email attribute in this list. You can have multiple values in the list, if for example you want to allow users to enter uid OR email address. I would be careful about allowing this flexibility if you are in a large organization because this will bring increased overhead to both AM & DS.
Also, be sure that whatever attribute you use is indexed!!
I hope this helps,
Eric

How do I use Generic LDAP Authentication in JDeveloper?

I have an existing JSP/Java Servlet application that uses a generic LDAP server for user authentication. Each JSP page checks the user name against a database entry for authorization to that page (itâs a legacy app).
The following web.xml fragment describes the
security/login configuration:
<security-constraint>
<display-name>I Security Constraint</display-name>
<web-resource-collection>
<web-resource-name>ALL</web-resource-name>
<url-pattern>/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<description>I</description>
<role-name>*</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>I Enterprise Server</realm-name>
</login-config>
I want to use JDeveloper and the built-in OC4J environment for development/debugging. I have tried configuring jazn.xml to use a LDAP provider (both in **\j2ee\home\config\ and **\jdev\system9.0.3.1035\oc4j-config\)
1) How do I configure the internal OC4J environment to use the generic LDAP service?
2) Does the JAZN LDAP only work with Oracle OID?
3) Is there a document or list-of-documents that consolidates the JDeveloper OC4J server administration functions? The existing OC4J administrative documentation is splattered about various web documents.
Thanks
Jake

Todd,
This how-to may help answer some of your questions
http://otn.oracle.com/tech/java/oc4j/htdocs/how-to-jazn.html
If you have additional questions on configuring jazn.xml for LDAP and OiD, I think your best bet is post to 9iAS J2EE forum.
Thanks,
Yvonne

LDAP Search filter Jabber for Android

Hi,
I have this LDAP Filter which only shows me active users:
<BaseFilter>(&(objectclass=user)(objectcategory=person)(!UserAccountControl:1.2.840.113556.1.4.803:=2))</BaseFilter>
I have the same line for Jabber for Android, but it doesn't work.
<BDIBaseFilter>(&(objectclass=user)(objectcategory=person)(!UserAccountControl:1.2.840.113556.1.4.803:=2))</BDIBaseFilter>
I get 0 results for any search on Jabber Andorid. When I delete the "BDI" Line for the filter all together, then I get correct results - with photos and everything.
I also tried a simple filter e.g:
<BDIBaseFilter>(!UserAccountControl:1.2.840.113556.1.4.803:=2))</BDIBaseFilter>
No search results either.
Any ideas how to get Filter for Android working?
Versions:
Jabber for Android: 10.6
CUCM: 9.1.2

I think I found the coresponding messages in the log:
csf.person.ldap: [LdapSearchQueryHandler.cpp(51)] [start] - reqId = 2
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapDirectoryImpl.cpp(1482)] [sendSearchQuery] -
02-26 09:18:59.851 15477 15477 I csf.person.xmpp: [XMPPPersonRecordSource.cpp(268)] [fetchContacts] - Entering.
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapDirectoryImpl.cpp(1531)] [sendSearchQuery] - filter = (&(objectclass=user)(objectcategory=person)(!UserAccountControl:1.2.840.113556.1.4.803:=2)(|(sAMAccountName=at1sath))), baseDN=OU=Organization,DC=at,DC=customer,DC=net
02-26 09:18:59.851 15477 15477 D services-dispatcher: [ServicesDispatcher.cpp(147)] [pumpNext] - pumpNext.executed (ContactsAdapter::LoadContactsFromSource)
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapDirectoryImpl.cpp(1576)] [sendSearchQuery] - ldap search error. rc= -7 ,msg=Bad search filter
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapDirectoryImpl.cpp(1675)] [notifyListenersSearchRequestCompleted] - errorCode=-7
02-26 09:18:59.851 15477 15477 D services-dispatcher: [ServicesDispatcher.cpp(145)] [pumpNext] - pumpNext.executing (ContactsAdapter::LoadContactsFromSource)
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapDirectoryImpl.cpp(1258)] [mapErrorNo] - Code = -7, Msg=Bad search filter
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapSearchQueryHandler.cpp(84)] [onSearchRequestCompleted] - reqId = 1, errcode = 9
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapDirectoryImpl.cpp(1531)] [sendSearchQuery] - filter = (&(objectclass=user)(objectcategory=person)(!UserAccountControl:1.2.840.113556.1.4.803:=2)(|(sAMAccountName=at1hafr))), baseDN=OU=Organization,DC=at,DC=customer,DC=net
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapDirectoryImpl.cpp(1576)] [sendSearchQuery] - ldap search error. rc= -7 ,msg=Bad search filter
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapDirectoryImpl.cpp(1675)] [notifyListenersSearchRequestCompleted] - errorCode=-7
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapDirectoryImpl.cpp(1258)] [mapErrorNo] - Code = -7, Msg=Bad search filter
02-26 09:18:59.851 15477 15645 D csf.person.ldap: [LdapSearchQueryHandler.cpp(84)] [onSearchRequestCompleted] - reqId = 2, errcode = 9
The next question is now: Why is it a bad search filter? And what is the correct one? The same filter works on jabber for windows...
BR, Dave

How can I use LDAP searching from OSX Lion Server to Mozilla Thunderbird?

How can I use LDAP searching from OSX Lion Server to Mozilla Thunderbird? We have a super awesome contacts server that works great for our Mac users. About 30% of our company are on PCs, and I would like to use the Mozilla Thunderbird mail client for them. I see that in Thunderbird I can set up LDAP searching, and would like to have this feature point to our contacts server. I've tried several different settings, and looked all over the web, but could not find the proper way to configure this. Does anyone know if this can be done, or if not, would have a better suggestion? Thank you for your time!!

try double clicking keychain acces should launch and ask if you want to install login, system, System roots
A dialog box will launch asking where to install the cert since your configuring a vpn I would put the certificate it in system.

Sun idm LDAP Search Filter, logical operations.

Hi
Can any body please give me the solution on LDAP Search Filter
I need to get all the users from a LDAP
Whose attribute1 contains any of the values like (abc, bbc)
OR
Whose attribute2 contains any of the values like (xyz, yxz)

we got the solution
(|(|(attr1=abc)(attr1=bbc))(|(attr2=xyz)(attr2=yxz)))
finally this worked.

Filter for Generic document Search

Hi experts ,
i need a filter in the generic document search of by B2B internet sales shop. The user should be only allowed to find documents starting with "xy" in the reference numbers. I know that I simply have to edit the generic-searchbackend.xml, but how?
Thanks in advance
Mirko

Hi,
please check the Development and Extension Guide, page 101 and following. This explains how the xml document is built up in more detail.
[http://service.sap.com/~sapidb/011000358700000469462006E/SAP_ISA50_DevAndExtGuide.pdf]
Thanks
Dominik

Concurrent ldap search in the same thread

Hi,
I try to send in parallel several ldap search request to an iDS5.0 SP1 ldap server. The ldap client is java coded using LDAP SDK.
To emphasis my problem, I wrote a very simple ldap client:
A first request is sent to the ldap server. 200 entries matches the search criteria;
searchListener = _ld.search("ou=city0, ou=region0, ou=LoadTest, o=surpass.com",1,"(cn=*)",attrs,false,null, searchConstraints);
I read the 5 first messages sent back by the ldap server:
while (true) {
ldapMessage=searchListener.getResponse();
nbEntries++;
if (nbEntries>5) break;
Without waiting for the resultCode message, I send a new ldap search:
ldapSearchResults = _ld.search("ou=city1, ou=region1, ou=LoadTest, o=surpass.com",1,"(cn=*)",attrs,false,searchConstraints);
This search locks the java process. A timeout message is generated in the ldap server logs:
[27/Jan/2003:14:13:35 +0100] conn=60660 op=2 fd=48 closed error 11 (Resource temporarily unavailable) - B4
Is it a bug? Or is it mandatory, in a single thread process, to wait for the resultCode message before sending any other search request?
Yannick

Thank's for answering
You'r right, there are many ways to overcome the problem in my very simple ldap client:
- Send an abandon
- Wait for the resultCode message
- Use the search constraint BATCHSIZE=0
But my question is: is it possible to run several concurrent ldap requets in the same thread (like a pool of ldap search) and check their results in a asynchronous way?
Any idea?

Ldap search query takes more than 10 seconds

LDAP query takes more than 10 seconds to execute.
For validating the policy configured, the Acess Manager(Sun Java System Access Manager) contacts the LDAP (Sun Java System Directory Server 6.2) to get the users in a dynamic group. The time out value configured in Access Manager for LDAP searches is 10 seconds.
Issue : The ldap query takes more than 10 seconds to execute at some times .
The query is executing with less than 10 seconds in most of the cases, but it takes more than 10 seconds in some cases. The total number of users available in the ldap is less than 1500.
7 etime =1
6 etime =1
102 etime=4
51 etime=5
26 etime=6
5 etime=7
4 etime=8
From the ldap access logs we can see the following entry,some times the query takes more than 10 seconds,
[28/May/2012:14:21:26 +0200] conn=281 op=41433 msgId=853995 - SRCH base="dc=****,dc=****,dc=com" scope=2 filter="(&(&(***=true)(**=true))(objectClass=vfperson))" attrs=ALL
[28/May/2012:14:21:36 +0200] conn=281 op=41434 msgId=854001 - ABANDON targetop=41433 msgid=853995 nentries=884 etime=10
The query was aborted by the access manger after 10 seconds.
Please post your suggestions to resolve this issue .
1.How we can find out , why the query is taking more than 10 seconds ?
2.Next steps to resolve this issue .

Hi Marco,
Thanks for your suggestions.
Sorry for replying late. I was out of office for few weeks.
1) Have you already tuned the caches? (entry cache, db cache, filesystem cache?)
We are using db cache and we have not done any turning for cache. The application was working fine and there was no much changes in the number of users .
2) Unfortunately we don't have direct access to the environment and we have contacted the responsible team to verify the server health during the issue .
Regarding the IO operations we can see that, load balancer is pinging the ldap sever every 15 seconds to check the status of ldap servers which yields a new connection on every hit. (on average per minute 8 connections - )
3) We using cn=dsameuser to bind the directory server. Other configuration details for ldap
LDAP Connection Pool Minimum Size: 1
LDAP Connection Pool Maximum Size:10
Maximum Results Returned from Search: 1700
Search Timeout: 10
Is the Search Timeout value configured is proper ? ( We have less than 1500 user in the ldap server).
Also is there any impact if the value Maximum Results Returned from Search = set to 1700. ( The Sun document for AM says that the ideal value for this is 1000 and if its higher than this it will impact performance.
The application was running without time out issue for last 2 years and there was no much increase in the number of users in the system. ( at the max 200 users added to the system in last 2 years.)
Thanks,
Jay

Multiple Filters in a Generic ldap Search.

Similar Messages

Maybe you are looking for