LO74109: COMPLEX LDAP SEARCH FILTER RETURNS NO RESULTS.

APAR status

• Closed as program error.

Error description

• Complex LDAP search filter returns no results. No results were
  returned even though a directory entry exists with
  these attributes. Doing the same search in Liferay portal and
  JXplorer  Customer has provided ldapsearch commands with
  ldapdebug=7 and the Domino log.
  Used the following search filter
  This work
  ldapsearch -h test.server.net -p 389 -b "o=dubbers"
  -D "dub dub" -w "password"
  "(&(uid=12078)(description=testing)(objectClass=dominoPerson))"
  This does not work:
  ldapsearch -h test.server.net -p 389 -b "o=dubbers"
  -D "dub dub" -w "password"
  "(&(uid=12078)((&(description=testing)(objectClass=dominoPerson)
  )))"
  ****************************************************************
  Microsoft Windows [Version 6.1.7601]
  Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
  C:\Users\Lotus_Support>ldapsearch -h test.sevrer.net
  -p 389 -b "o=dubb
  ers" -D "dub dub" -w "password"
  "(&(uid=12078)(description=testing)(objectClass=
  dominoPerson))"
  CN=Dub Dub,O=Dubbers
  cn=Dub Dub
  mail=Ddub@austin.ibm.com
  displayname=Dub Dub/Dubbers
  majver=8
  minver=5
  qmrver=3
  qmuver=0
  hotver=0
  fixpver=0
  flagsver=0
  dominocertificate=0400B701 A7E57A2F 09G01614 G00203D9
  mailsystem=1
  messagestorage=1
  encryptincomingmail=0
  objectclass=dominoPerson
  objectclass=inetOrgPerson
  objectclass=organizationalPerson
  objectclass=person
  objectclass=top
  description=testing
  roamcleansetting=0
  roamcleanper=1
  availablefordirsync=1
  checkpassword=0
  passwordchangeinterval=0
  passwordgraceperiod=0
  clienttype=0
  givenname=Dub
  sn=Dub
  uid=12078
  maildomain=Dubbers
  mailserver=CN=Dub,O=Dubbers
  mailfile=mail\ddub
  roaminguser=0
  httppasswordchangedate=20120516041553Z
  clntmachine=CH-T420
  clntbld=Release 8.5.3
  clntpltfrm=Windows/7 6.1 Intel Pentium
  clntdate=20120516045500Z
  userpassword=(G3iOaQ8EZ2S4muCK7jJb)
  C:\Users\Lotus_Support>ldapsearch -h test.server.net
  -p 389 -b "o=dubb
  ers" -D "dub dub" -w "password"
  "(&(uid=12078)((&(description=testing)(objectCla
  ss=dominoPerson))))"
  

Local fix

• none at the moment
  

Problem summary

• Complex LDAP queries fail because of search type mismatches.
   This fix tracks the match status of sub-filters so that
   complex queries can be handled appropriately. This behavior is
   enabled by the INI parameter LDAP_COMPLEX_FILTER=1.
  

Problem conclusion

• Complex LDAP queries fail because of search type mismatches.
   This fix tracks the match status of sub-filters so that
   complex queries can be handled appropriately. This behavior is
   enabled by the INI parameter LDAP_COMPLEX_FILTER=1.
  

Temporary fix

Comments

• This APAR is associated with SPR# CAHT959LQG.
  Complex LDAP queries fail because of search type mismatches.
   This fix tracks the match status of sub-filters so that
   complex queries can be handled appropriately. This behavior is
   enabled by the INI parameter LDAP_COMPLEX_FILTER=1.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DOMINO SERVER

• Fixed component ID

  5724E6200

Applicable component levels

• R853 PSN

     UP