Okay, so I'm seeing some extremely bizzar behaviour and, for the life of me, I can't track why its doing what its doing.

Trying to do some LDAP searching with wildcards.

Working Example: (&(|(preferredName=B*)(givenName=B*))(sn=W*))

Failing Example: (&(|(preferredName=J*)(givenName=J*))(sn=W*))

I mean, WTF?! I know the objects exist and I know they can be read.

If I change the failing example to: (|(preferredName=J*)(givenName=J*))

I get results, but only where the Surname ALSO starts with J*

If I change the working example to: (|(preferredName=B*)(givenName=B*))

I get results, no matter what the Surname is.

I do have some compound indexes that use a combination of the attributes, but I would expect this to cause problems with both the working and failing queries, not just the "J*" one.

Server Index Definitions:

Code:
indexDefinition: 0$Aliased Object Name$0$0$2$1$Aliased Object Name
indexDefinition: 0$CN$0$0$1$1$CN
indexDefinition: 0$CN_SS$0$2$1$1$CN
indexDefinition: 0$CachedAttrsOnExtRefs$0$0$3$1$CachedAttrsOnExtRefs
indexDefinition: 0$DirXML-Policies$0$0$3$1$DirXML-Policies
indexDefinition: 0$DirXMLIndex$0$0$0$1$DirXML-Associations
indexDefinition: 0$DirXMLIndex3$0$0$0$1$DirXML-AssociationsLite
indexDefinition: 0$GUID$0$0$2$1$GUID
indexDefinition: 0$Given Name$0$0$1$1$Given Name
indexDefinition: 0$GivenName_Surname_C$0$0$0$1$Given Name$Surname
indexDefinition: 0$Obituary$0$0$3$1$Obituary
indexDefinition: 0$Obituary$0$1$2$1$Obituary
indexDefinition: 0$Revision$0$0$3$1$Revision
indexDefinition: 0$Surname$0$0$1$1$Surname
indexDefinition: 0$Title_Surname_C$0$0$0$1$Title$Surname
indexDefinition: 0$company_V$0$0$0$1$company
indexDefinition: 0$dc$0$0$1$1$dc
indexDefinition: 0$extensionInfo$0$0$3$1$extensionInfo
indexDefinition: 0$fullName_V$0$0$0$1$Full Name
indexDefinition: 0$gipsDisplayStatus_Company_C$0$0$0$1$company$gipsDisplayStatus
indexDefinition: 0$gipsDisplayStatus_V$0$0$0$1$gipsDisplayStatus
indexDefinition: 0$groupMember$0$0$1$1$groupMember
indexDefinition: 0$indexDefinition$0$0$3$1$indexDefinition
indexDefinition: 0$ldapAttributeList$0$0$3$1$ldapAttributeList
indexDefinition: 0$ldapClassList$0$0$1$1$ldapClassList
indexDefinition: 0$loginExpirationTime_V$0$0$0$1$Login Expiration Time
indexDefinition: 0$mail_V$0$0$0$1$Internet EMail Address
indexDefinition: 0$memberQuery$0$0$1$1$memberQuery
indexDefinition: 0$nrf(Object Class)$0$0$0$1$Object Class
indexDefinition: 0$nrf(nrfCategory)$0$0$0$1$nrfCategory
indexDefinition: 0$nrf(nrfChildRoles)$0$0$0$1$nrfChildRoles
indexDefinition: 0$nrf(nrfLocalizedDescrs)$0$2$0$1$nrfLocalizedDescrs
indexDefinition: 0$nrf(nrfLocalizedNames)$0$2$0$1$nrfLocalizedNames
indexDefinition: 0$nrf(nrfMemberOf)$0$0$0$1$nrfMemberOf
indexDefinition: 0$nrf(nrfNextExpiration)$0$0$0$1$nrfNextExpiration
indexDefinition: 0$nrf(nrfParentRoles)$0$0$0$1$nrfParentRoles
indexDefinition: 0$nrf(nrfRoleCategoryKey)$0$0$0$1$nrfRoleCategoryKey
indexDefinition: 0$nrf(nrfRoles)$0$0$0$1$nrfRoles
indexDefinition: 0$nrf(nrfStartDate)$0$0$0$1$nrfStartDate
indexDefinition: 0$nrf(nrfStatus)$0$0$0$1$nrfStatus
indexDefinition: 0$nrfGroupRoles$0$0$3$1$nrfGroupRoles
indexDefinition: 0$oidpInstanceData$0$0$3$1$oidpInstanceData
indexDefinition: 0$orgBranch_V$0$0$0$1$orgBranch
indexDefinition: 0$orgDivision_V$0$0$0$1$orgDivision
indexDefinition: 0$orgGroup_V$0$0$0$1$orgGroup
indexDefinition: 0$orgLevel10_V$0$0$0$1$orgLevel10
indexDefinition: 0$orgLevel11_V$0$0$0$1$orgLevel11
indexDefinition: 0$orgLevel12_V$0$0$0$1$orgLevel12
indexDefinition: 0$orgLevel13_V$0$0$0$1$orgLevel13
indexDefinition: 0$orgLevel14_V$0$0$0$1$orgLevel14
indexDefinition: 0$orgLevel15_V$0$0$0$1$orgLevel15
indexDefinition: 0$orgLevel8_V$0$0$0$1$orgLevel8
indexDefinition: 0$orgLevel9_V$0$0$0$1$orgLevel9
indexDefinition: 0$orgSection_V$0$0$0$1$orgSection
indexDefinition: 0$orgSubGroup_V$0$0$0$1$orgSubGroup
indexDefinition: 0$orgSubSection_V$0$0$0$1$orgSubSection
indexDefinition: 0$preferredName_Surname_C$0$0$0$1$preferredName$Surname
indexDefinition: 0$preferredName_V$0$0$0$1$preferredName
indexDefinition: 0$rbsAssignedRoles2$0$0$3$1$rbsAssignedRoles2
indexDefinition: 0$rbsTaskRights$0$0$3$1$rbsTaskRights
indexDefinition: 0$srvprvIdxOnManager$0$0$0$1$manager
indexDefinition: 0$srvprvIdxOnUUID$0$0$0$1$srvprvUUID
indexDefinition: 0$srvprvIdxOnisManager$0$0$0$1$isManager
indexDefinition: 0$sssActiveServerList$0$0$3$1$sssActiveServerList
indexDefinition: 0$uniqueID$0$0$1$1$uniqueID
indexDefinition: 0$uniqueID_SS$0$2$1$1$uniqueID
Server LDAP Group definition:

Code:
ldapAttributeList: NDSName=C$LDAPNames=c\24countryName
ldapAttributeList: NDSName=CN$LDAPNames=cn\24commonName
ldapAttributeList: NDSName=Cross Certificate Pair$LDAPNames=ndsCrossCertificatePair
ldapAttributeList: NDSName=DS Revision$LDAPNames=dsRevision
ldapAttributeList: NDSName=Description$LDAPNames=description\24multiLineDescription
ldapAttributeList: NDSName=GID$LDAPNames=groupID
ldapAttributeList: NDSName=Generational Qualifier$LDAPNames=generationQualifier
ldapAttributeList: NDSName=Home Directory$LDAPNames=ndsHomeDirectory
ldapAttributeList: NDSName=Initials$LDAPNames=initials
ldapAttributeList: NDSName=Internet EMail Address$LDAPNames=mail
ldapAttributeList: NDSName=L$LDAPNames=l\24localityname
ldapAttributeList: NDSName=LDAP Allow Clear Text Password$LDAPNames=ldapAllowClearTextPassword
ldapAttributeList: NDSName=LDAP Anonymous Identity$LDAPNames=ldapAnonymousIdentity
ldapAttributeList: NDSName=LDAP Attribute Map v11$LDAPNames=ldapAttributeMap
ldapAttributeList: NDSName=LDAP Class Map v11$LDAPNames=ldapClassMap
ldapAttributeList: NDSName=LDAP Enable SSL$LDAPNames=ldapEnableSSL
ldapAttributeList: NDSName=LDAP Enable TCP$LDAPNames=ldapEnableTCP
ldapAttributeList: NDSName=LDAP Group$LDAPNames=ldapGroupDN
ldapAttributeList: NDSName=LDAP Host Server$LDAPNames=ldapHostServer
ldapAttributeList: NDSName=LDAP Referral$LDAPNames=ldapReferral
ldapAttributeList: NDSName=LDAP SSL Port$LDAPNames=ldapSSLPort
ldapAttributeList: NDSName=LDAP Screen Level$LDAPNames=ldapTraceLevel
ldapAttributeList: NDSName=LDAP Server Bind Limit$LDAPNames=ldapServerBindLimit
ldapAttributeList: NDSName=LDAP Server Idle Timeout$LDAPNames=ldapServerIdleTimeout
ldapAttributeList: NDSName=LDAP Server List$LDAPNames=ldapServerList
ldapAttributeList: NDSName=LDAP Server$LDAPNames=ldapServerDN
ldapAttributeList: NDSName=LDAP TCP Port$LDAPNames=ldapTCPPort
ldapAttributeList: NDSName=LDAP:keyMaterialName$LDAPNames=ldapKeyMaterialName
ldapAttributeList: NDSName=LDAP:searchReferralUsage$LDAPNames=ldapSearchReferralUsage
ldapAttributeList: NDSName=Login Allowed Time Map$LDAPNames=loginAllowedTimeMap
ldapAttributeList: NDSName=Member$LDAPNames=member\24uniqueMember
ldapAttributeList: NDSName=NSCP:employeeNumber$LDAPNames=employeeNumber
ldapAttributeList: NDSName=NSCP:memberCertificateDesc$LDAPNames=memberCertificateDescription
ldapAttributeList: NDSName=Notify$LDAPNames=notify
ldapAttributeList: NDSName=O$LDAPNames=o\24organizationname
ldapAttributeList: NDSName=OU$LDAPNames=ou\24organizationalUnitName
ldapAttributeList: NDSName=Operator$LDAPNames=operator
ldapAttributeList: NDSName=Owner$LDAPNames=owner
ldapAttributeList: NDSName=Path$LDAPNames=path
ldapAttributeList: NDSName=Postal Office Box$LDAPNames=postOfficeBox
ldapAttributeList: NDSName=Printer Configuration$LDAPNames=printerConfiguration
ldapAttributeList: NDSName=Printer$LDAPNames=printer
ldapAttributeList: NDSName=Queue$LDAPNames=queue
ldapAttributeList: NDSName=Revision$LDAPNames=revision
ldapAttributeList: NDSName=S$LDAPNames=st\24stateOrProvinceName
ldapAttributeList: NDSName=SA$LDAPNames=street
ldapAttributeList: NDSName=Serial Number$LDAPNames=serialNumber
ldapAttributeList: NDSName=Server$LDAPNames=server
ldapAttributeList: NDSName=Status$LDAPNames=status
ldapAttributeList: NDSName=Surname$LDAPNames=sn\24surname
ldapAttributeList: NDSName=Title$LDAPNames=title
ldapAttributeList: NDSName=UID$LDAPNames=ndsUID
ldapAttributeList: NDSName=cACertificate$LDAPNames=cACertificate;binary\24cACertificate
ldapAttributeList: NDSName=crossCertificatePair$LDAPNames=crossCertificatePair;binary\24crossCertificatePair
ldapAttributeList: NDSName=dc$LDAPNames=dc
ldapAttributeList: NDSName=enhancedSearchGuide$LDAPNames=enhancedSearchGuide
ldapAttributeList: NDSName=memberQuery$LDAPNames=memberQueryURL
ldapAttributeList: NDSName=ndspkiAuthorityRevocationList$LDAPNames=authorityRevocationList;binary\24authorityRevocationList
ldapAttributeList: NDSName=ndspkiCertificateRevocationList$LDAPNames=certificateRevocationList;binary\24certificateRevocationList
ldapAttributeList: NDSName=ndspkiDeltaRevocationList$LDAPNames=deltaRevocationList;binary\24deltaRevocationList
ldapAttributeList: NDSName=preferredDeliveryMethod$LDAPNames=preferredDeliveryMethod
ldapAttributeList: NDSName=presentationAddress$LDAPNames=presentationAddress
ldapAttributeList: NDSName=protocolInformation$LDAPNames=protocolInformation
ldapAttributeList: NDSName=registeredAddress$LDAPNames=registeredAddress
ldapAttributeList: NDSName=searchGuide$LDAPNames=searchGuide
ldapAttributeList: NDSName=staticMember$LDAPNames=member;x-static
ldapAttributeList: NDSName=supportedAlgorithms$LDAPNames=supportedAlgorithms
ldapAttributeList: NDSName=supportedApplicationContext$LDAPNames=supportedApplicationContext
ldapAttributeList: NDSName=teletexTerminalIdentifier$LDAPNames=teletexTerminalIdentifier
ldapAttributeList: NDSName=telexNumber$LDAPNames=telexNumber
ldapAttributeList: NDSName=uniqueID$LDAPNames=uid\24userId
ldapAttributeList: NDSName=userCertificate$LDAPNames=userCertificate;binary\24userCertificate
ldapAttributeList: NDSName=x500UniqueIdentifier$LDAPNames=x500UniqueIdentifier
ldapClassList: NDSName=Alias$LDAPNames=aliasObject
ldapClassList: NDSName=Group$LDAPNames=groupOfNames\24groupOfUniqueNames\24group
ldapClassList: NDSName=LDAP Group$LDAPNames=ldapGroup
ldapClassList: NDSName=LDAP Server$LDAPNames=ldapServer
ldapClassList: NDSName=NCP Server$LDAPNames=ncpServer
ldapClassList: NDSName=User$LDAPNames=inetOrgPerson
ldapClassList: NDSName=certificationAuthorityVer2$LDAPNames=certificationAuthority-V2