Hi!
I'm having problem with destination querys with two matching values,
i.e. multivalue attributes.
When the query is transformed into a ldap filter, the OR statement is
ended with a square bracket.

(&(&(objectCategory=CN=Group,CN=Schema,CN=Configur ation,DC=customer,DC=intra)(objectClass=group))(|( cn=Orgunit_Thn_Trh_Me_Users_All)(cn=Orgunit_GBG_EL Y_Users_ALL)*}*)

If the square bracket is changed to a bracket, then the query will
return two objects in a regular ldap query outside IDM..

This has been seen before in a previous 'post'
(http://tinyurl.com/l5tgzwj):

It might be a bug that crept in? Someone who can help me to confirm it?

Thanks
//Magnus


Code:
--------------------
DirXML: [02/17/14 14:15:12.23]: Loader: Calling subscriptionShim->execute()
DirXML: [02/17/14 14:15:12.23]: Loader: XML Document:
DirXML: [02/17/14 14:15:12.23]: <nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.2.4">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query-ex class-name="group" event-id="0" max-result-count="1" scope="subtree">
<search-class class-name="group"/>
<search-attr attr-name="cn">
<value naming="true" timestamp="1357041125#30" type="string">Orgunit_Thn_Trh_Me_Users_All</value>
<value timestamp="1384514008#1" type="string">Orgunit_GBG_ELY_Users_ALL</value>
</search-attr>
<read-attr attr-name="cn"/>
</query-ex>
</input>
</nds>
DirXML: [02/17/14 14:15:12.23]: ADDriver: parse command

className group
destDN
eventId 0
association
DirXML: [02/17/14 14:15:12.23]: ADDriver: query-ex new
DirXML: [02/17/14 14:15:12.23]: ADDriver: query constraints
DirXML: [02/17/14 14:15:12.23]: ADDriver: search-class group
DirXML: [02/17/14 14:15:12.23]: ADDriver: search-attr cn
DirXML: [02/17/14 14:15:12.23]: ADDriver: Orgunit_Thn_Trh_Me_Users_All
DirXML: [02/17/14 14:15:12.23]: ADDriver: Orgunit_GBG_ELY_Users_ALL
DirXML: [02/17/14 14:15:12.23]: ADDriver: query
base DN: DC=customer,DC=intra,
filter: (&(&(objectCategory=CN=Group,CN=Schema,CN=Configur ation,DC=customer,DC=intra)(objectClass=group))(|( cn=Orgunit_Thn_Trh_Me_Users_All)(cn=Orgunit_GBG_EL Y_Users_ALL)}),
return: (attribute values) objectClass, objectGUID, cn,
DirXML: [02/17/14 14:15:12.23]: ADDriver: query
base DN: DC=customer,DC=intra,
filter: (&(&(objectCategory=CN=Group,CN=Schema,CN=Configur ation,DC=customer,DC=intra)(objectClass=group))(|( cn=Orgunit_Thn_Trh_Me_Users_All)(cn=Orgunit_GBG_EL Y_Users_ALL)}),
return: (attribute values) objectClass, objectGUID, cn,
DirXML: [02/17/14 14:15:12.23]: ADDriver: ldap get next page ( 1)
DirXML: [02/17/14 14:15:12.23]: Loader: subscriptionShim->execute() returned:
DirXML: [02/17/14 14:15:12.23]: Loader: XML Document:
DirXML: [02/17/14 14:15:12.23]: <nds ndsversion="8.7" dtdversion="1.1">
<source>
<product version="4.0.0.3" asn1id="" build="20131219_120000" instance="\META\System\Services\Idm\DriverSet1\cus tomer_intra">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="error" type="driver-general" event-id="0">
<message>Error getting next page of search results</message>
<ldap-err ldap-rc="87" ldap-rc-name="LDAP_FILTER_ERROR">
<client-err ldap-rc="87" ldap-rc-name="LDAP_FILTER_ERROR">Filter Error</client-err>
</ldap-err>
</status>
</output>
</nds>
--------------------


--
magnus
------------------------------------------------------------------------
magnus's Profile: https://forums.netiq.com/member.php?userid=283
View this thread: https://forums.netiq.com/showthread.php?t=50045