LO54817: LDAP REQUEST PEFORMING VIEW SEARCH RATHER THAN FT SEARCH

APAR status

• Closed as fixed if next.

Error description

• Customer is using a third party tool performing the following
  LDAP lookup :
  
  (&
  (mail=*)(objectclass=dominoServerMailInDatabase)
  (availablefordirsync=1)
  (|(mailserver=cn=ServerCN,ou=ServerOU,O=ServerO)
  (mailserver=cn=Server2CN,ou=Server2OU,o=Server2O)
  )
  
  With LDAPDebug=7 enabled, we can see that this request is
  looking into a view rather than the FT index, and also that it
  looks into a view that contains no Mail-In databases. Therefore,
  it returns no result, while there should be some.
  
  This behaviour has been seen after upgrading to Domino 8.5.1,
  and was working fine in Domino 7
  
  The problem was reproduced internally
  
  After further investigations, it was found that the problem was
  only happening when the attribute "mailserver" is present in the
  request.
  
  For instance, considering a Domino server named
  "VM852/The852Organization"
  
  A request like this one does not work (search in the view):
  
  ldapsearch -h 127.0.0.1 -D admin -w password
  "(&(objectclass=dominoServerMailInDatabase)
  (mailserver=cn=VM852,o=the852Organization))"
  => goes to look in the view mailusers (Which contains no mailin)
  
  
  A request like this one does work fine
  
  ldapsearch -h 127.0.0.1 -D admin -w password
  "(&(objectclass=dominoServerMailInDatabase))"
  => goes to look in the FT
  

Local fix

Problem summary

• The problem will be fixed in the next release of the product.
  

Problem conclusion

Temporary fix

Comments

• This APAR is associated with SPR# BSTS89DKM6.
  The problem will be fixed in the next release of the product.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R851 PSN

     UP