Ldapsearches Filtering On Uniquemember Does Not Return Dynamic Groups (Based On Labeleduri Attributes) from OID 10g

(Doc ID 828766.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Internet Directory - Version 9.0.4 to [Release 10gR1 to 10gR3]
Information in this document applies to any platform.


Successfully created a dynamic group in Oracle Internet Directory (OID), based on labeleduri attribute, by ldapadding the following ldif file for example:

dn: cn=mygroup,cn=Groups,dc=mycompany,dc=com
objectclass: orclDynamicGroup
objectclass: groupOfUniqueNames
objectclass: top
labeleduri: ldap://localhost:389/cn=Users,dc=mycompany,dc=com??sub?(cn=myuser*)
cn: mygroup

Also added several users with usernames starting with myuser (to follow the example above).

When using ldapsearch filtering on (uniquemember=cn=myuser*):

ldapsearch -h localhost -p 389 -b "cn=groups,dc=mycompany,dc=com" -s sub "(uniquemember=cn=myuser*)" dn

It does not return the above dynamic group DN.  It only returns other/static group DNs.

The dynamic group membership works otherwise - searching for the dynamic group entry itself returns all the uniquemembers whose cn match match the labeleduri filter ok.




Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms