Ldapsearches Filtering On Uniquemember Does Not Return Dynamic Groups (Based On Labeleduri Attributes) from OID 10g (Doc ID 828766.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Internet Directory - Version 9.0.4 to 10.1.4.2 [Release 10gR1 to 10gR3]
Information in this document applies to any platform.

Symptoms

Successfully created a dynamic group in Oracle Internet Directory (OID), based on labeleduri attribute, by ldapadding the following ldif file for example:

dn: cn=mygroup,cn=Groups,dc=mycompany,dc=com
objectclass: orclDynamicGroup
objectclass: groupOfUniqueNames
objectclass: top
labeleduri: ldap://localhost:389/cn=Users,dc=mycompany,dc=com??sub?(cn=myuser*)
cn: mygroup

Also added several users with usernames starting with myuser (to follow the example above).

When using ldapsearch filtering on (uniquemember=cn=myuser*):

ldapsearch -h localhost -p 389 -b "cn=groups,dc=mycompany,dc=com" -s sub "(uniquemember=cn=myuser*)" dn

It does not return the above dynamic group DN.  It only returns other/static group DNs.

The dynamic group membership works otherwise - searching for the dynamic group entry itself returns all the uniquemembers whose cn match match the labeleduri filter ok.

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms