When performing subgroup searches, an LDAP search with scope base is issued on the DN of a group with a hard-coded filter of "cn=*". If the group does not have a cn, the search will fail. Since we simply want to get the group members, the default filter of "objectClass=*" should be used. A patch is attached that sets the filter to NULL, which defaults to "objectClass=*".
Attachment:
oc.patch
Description: Binary data
--------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|