IBM Support

Search with filter values that does not conform to the attribute syntax results in either "Invalid Syntax" or "Bad Search Filter" error.


Manuals

Abstract

While performing any operation on the data like modifications or searching, Directory Server throws syntax errors if the input does not conform to the defined attribute syntaxes. Whereas these syntax validations should be only applicable while adding/modifying the data while searching these validations can be ignored and should return no results.

To facilitate this, an environment variable IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR is introduced. IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR can be set/unset to switch between the existing and new behaviour of syntax validations.
This technote describes the way to enable/disable the syntax errors for search operation

Contents

To skip syntax validation for the search operation, IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR  environment variable can be set.
By default IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR variable is not set. 
- If set to 'FALSE' or bad value or not set, syntax validation will be performed while search operation.
- If 'TRUE'/'true', syntax validation will be skipped during search operation.

IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR environment variable can be set either by adding the variable in configuration file or using the command prompt. 
  • Adding variable to configuration file (Suggested method)
  • Using LDAP client utility with either SDS 8.0.1 or SDS 6.4: 
        1. Run idsldapmodify command of the following format against the SDS ldap server (For SDS 8.0.1 - idsldapsearch is in the "sds client_tools" section) :   
                       idsldapmodify -p <port> -D <adminDN> -w <adminPW>
                       dn: cn=Front End, cn=configuration
                       changetype: modify
                       add: ibm-slapdSetEnv
                       ibm-slapdSetEnv: IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR=TRUE
        2. Restart the directory server instance

  • From command prompt -
           Set the environment variable IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR. 
           1.  On SDS 6.4.0.21 and above levels, this can be done as follows -
              On AIX, Linux, and Solaris systems (ksh shell):
                       export IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR=TRUE
              On Windows systems: 
                       set IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR=TRUE

               For the set value of the environment variable to be effective, restart the directory server instance from the same shell where the above environment variable was set.

           2.  On SDS VA 8.0.1.13 and above levels – Use idsenvvars command to specify environment variable and its value. 
              To add environment variable
                       idsenvvars -a IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR -v TRUE
              To modify the value of environment variable 
                       idsenvvars -m IBMSLAPD_DISABLE_SEARCH_FILTER_SYNTAX_ERR -v TRUE

              Restart the directory server instance from ISDS Virtual Appliance CLI or LMI panel.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSVJJU","label":"IBM Security Directory Server"},"ARM Category":[{"code":"a8m0z0000001hpkAAA","label":"Client"},{"code":"a8m0z0000001hq3AAA","label":"Configuration"},{"code":"a8m0z0000001hpuAAA","label":"Environment"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.4","Line of Business":{"code":"LOB24","label":"Security Software"}},{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS3Q78","label":"IBM Security Directory Suite"},"ARM Category":[{"code":"a8m0z0000001hpkAAA","label":"Client"},{"code":"a8m0z0000001hq3AAA","label":"Configuration"},{"code":"a8m0z0000001hpuAAA","label":"Environment"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0.1","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

More support for:
IBM Security Directory Server

Component:
Client, Configuration, Environment

Software version:
6.4

Document number:
6233328

Modified date:
19 June 2020

UID

ibm16233328

Manage My Notification Subscriptions

Page Feedback