Grouper Users - Open Discussion List

[Andre Daniels <>]

We tried to use syntax like this filter=(&(objectclass=groupOfNames)(cn=admin)(ou:dn:=groupA)(ou:dn:=allGroups) but we got the following error

2019-01-28 09:13:47,661: [DefaultQuartzScheduler_Worker-5] ERROR LdapObject.matchesLdapFilter(279) - Problem checking ldap filter in memory: [org.ldaptive.SearchFilter@-453243967::filter=(&(objectclass=groupOfNames)(cn=admin)(ou:dn:=groupA)(ou:dn:=allGroups)) , parameters={}]
LDAPException(resultCode=92 (not supported), errorMessage='Extensible matching is not supported when attempting to determine whether a given entry matches a search filter.')

I am wondering if this error is just followed up by a call to the ldap service and can safely be ignored. 

Andre

On Fri, Jan 25, 2019 at 5:48 PM Andre Daniels <> wrote:

Hello,

I am a not sure how to best configure pspng to provision to an ldap ou that has a folder-like hierarchy and groups with similar names. The groupSearchBaseDn does not appear to accept a jexl _expression_, so how does one prevent name collision? If I set the baseDn to allGroups, how does the provisioner determine whether a given update is for the allGroups:groupA:admins or allGroups:groupB:admins?

Thanks,

Andre

--

Andre Daniels 

Sr. Developer/Security Analyst

University of California Santa Cruz

(831) 459-1980

--

Andre Daniels 

Sr. Developer/Security Analyst

University of California Santa Cruz

(831) 459-1980