CODEWITHSUNDEEP
perlfilterldap
SulliedGeek
SulliedGeek

Reputation: 3

LDAP filter for single value in multivalue field

I'm trying to build a LDAP query that searches for groups that are owned (multivalued attribute) by a particular user and nobody else.

Simple Exp:

Group A: Owners [Bob, Joe, Bill]
Group B: Owners [Bob]
Group C: Owners [Carl]

Only group b should be returned by this query if I was looking for Bob. My current query pulls all groups where a named person is an owner then I'm using Perl to loop through the results and find what I need, but it seems a little inefficient. Any pointers or suggestions would be appreciated.

Upvotes: 0

Views: 457

Answers (1)

user207421
user207421

Reputation: 310980

You can't. There is no LDAP filter syntax that can possibly accomplish that. See RFC 2254. This is a very strange design. It doesn't map not LDAP can do at all.

Upvotes: 1

Related Questions