DAL Query - Check for group membership using User DN param

[gtejo1]

Hello everyone, in the past few days i was trying to execute a DAL query to retrieve the groups in witch a user DN (passed as the only parameter) figures as member.
Here is the problem:
When i try to execute the query in a onload event like this
IDVault.globalQuery("gruposAux2", "ObtenerGruposAprobadores", {"usuario":"cn=glatorre,ou=Users,o=organization"})
to fullfil a picklist field gruposAux2 , in the ua, in the requerest form i get this error:
gruposAux: Script error in idvault.globalQuery()



I not getting any more info in the catalatina.out log so i checked the DAL query definition and the Entity definition, both are consistent with others object thats work with the same logic. So then i checked the LDAP directory, and i think that the problem is that i can't execute a query to check a DN type field in the directory. Is this correct? How can i workarround this? i tried to call the query inside de DNQuery field too, an i getting this error message when i try to execute it inside the request form:

Ldap error querying for results. Error: javax.naming.directory.InvalidSearchFilterException: [LDAP: error code 18 - Inappropriate Matching]; remaining name 'OU=Groups,OU=Users,O=organization'

Thanks in advance for your help!!

[Anonymous_User]

A group query for member DNs is possible and shouldn't cause issues when
setup correctly.

The error
[LDAP: error code 18 - Inappropriate Matching];
remaining name 'OU=Groups,OU=Users,O=organization'*
indicates that your query isn't correct.
Make sure to pass a valid user DN, the filter is set to "equals" (not
"contains"), and the query search base is valid.
If you don't find an issue of your query you might want to share some
details here.

Wolfgang


On 27/07/2018 18:34, gtejo wrote:
>
> Hello everyone, in the past few days i was trying to execute a DAL query
> to retrieve the groups in witch a user DN (passed as the only parameter)
> figures as member.
> Here is the problem:
> When i try to execute the query in a onload event like this
> *IDVault.globalQuery("gruposAux2", "ObtenerGruposAprobadores",
> {"usuario":"cn=glatorre,ou=Users,o=organization"})*
> to fullfil a picklist field gruposAux2 , in the ua, in the requerest
> form i get this error:
> *gruposAux: Script error in idvault.globalQuery()*
>
> [image: https://i.imgur.com/BAED5OK.png]
>
> I not getting any more info in the catalatina.out log so i checked the
> DAL query definition and the Entity definition, both are consistent with
> others object thats work with the same logic. So then i checked the LDAP
> directory, and i think that the problem is that i can't execute a query
> to check a DN type field in the directory. Is this correct? How can i
> workarround this? i tried to call the query inside de DNQuery field too,
> an i getting this error message when i try to execute it inside the
> request form:
>
> *Ldap error querying for results. Error:
> javax.naming.directory.InvalidSearchFilterException: [LDAP: error code
> 18 - Inappropriate Matching]; remaining name
> 'OU=Groups,OU=Users,O=organization'*
>
> Thanks in advance for your help!!
>
>

[gtejo1]

Okey, i cheked all the item's that you said, and the result is the same, still getting this error



Here is a picture of the DAL query:



There is any more info that i can show you? Thanks

[wschreiber1]

Did you choose the search base 'OU=Groups,OU=Users,O=organization' with
Designer's object selector? It doesn't happen to be
'OU=Groups,O=organization'?

Can you copy the DN of a group that you expect to be found?

Wolfgang


On 27.07.2018 19:34, gtejo wrote:
>
> Okey, i cheked all the item's that you said, and the result is the same,
> still getting this error
>
> [image: https://i.imgur.com/fQomBnY.png]
>
> Here is a picture of the DAL query:
>
> [image: https://i.imgur.com/JsoswHn.png]
>
> There is any more info that i can show you? Thanks
>
>