Skip to Content.
Sympa Menu

grouper-users - [grouper-users] LDAP "Free form search" issue in the Subject API Diagnostics

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] LDAP "Free form search" issue in the Subject API Diagnostics


Chronological Thread 
  • From: Liam Hoekenga <>
  • To:
  • Subject: [grouper-users] LDAP "Free form search" issue in the Subject API Diagnostics
  • Date: Thu, 30 Mar 2017 15:28:19 -0500
  • Ironport-phdr: 9a23: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

The answer from one of my earlier questions pointed me at the "Subject API Diagnostics", which seems like a really useful tool.

I think it would be useful to be able to perform any of the searches via the diagnostic tool on it's own.  It's actually the first thing I tried to do.

I found if you do provide terms for a single search, it runs all of the defined searches with incomplete search terms.  Mostly harmless.

With the provided LDAP searches, you can get sort of useless value match searches, but those return quickly..

    (&(exampleEduRegId=)(objectclass=exampleEduPerson))
    (&(uid=)(objectclass=exampleEduPerson))

The problem is the freeform search.  If you don't provide a string for the freeform search, you can get a wildcard search like...

    (&(|(|(uid=)(cn=*))(exampleEduRegId=))(objectclass=exampleEduPerson))

...which returns every exampleEduPerson object in the search base.  Looking at the filter, I get why it's doing it, but it's not what I expected.

I know you can provide default search terms in subjects.properties / sources.xml, but I think this tool would be useful for debugging issues with any given subject, using whatever piece of identifying information is handy.

Liam



  • [grouper-users] LDAP "Free form search" issue in the Subject API Diagnostics, Liam Hoekenga, 03/30/2017

Archive powered by MHonArc 2.6.19.

Top of Page