My Oracle Support Banner

Ldapsearches Filtering On Uniquemember Does Not Return Dynamic Groups (Based On Labeleduri Attributes) from OID 10g (Doc ID 828766.1)

Last updated on AUGUST 09, 2022

Applies to:

Oracle Internet Directory - Version 9.0.4 to 10.1.4.2 [Release 10gR1 to 10gR3]
Information in this document applies to any platform.

Symptoms

Successfully created a dynamic group in Oracle Internet Directory (OID), based on labeleduri attribute, by ldapadding the following ldif file for example:

dn: cn=mygroup,cn=Groups,dc=mycompany,dc=com
objectclass: orclDynamicGroup
objectclass: groupOfUniqueNames
objectclass: top
labeleduri: ldap://localhost:389/cn=Users,dc=mycompany,dc=com??sub?(cn=myuser*)
cn: mygroup

Also added several users with usernames starting with myuser (to follow the example above).

When using ldapsearch filtering on (uniquemember=cn=myuser*):

ldapsearch -h localhost -p 389 -b "cn=groups,dc=mycompany,dc=com" -s sub "(uniquemember=cn=myuser*)" dn

It does not return the above dynamic group DN.  It only returns other/static group DNs.

The dynamic group membership works otherwise - searching for the dynamic group entry itself returns all the uniquemembers whose cn match match the labeleduri filter ok.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.