UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21. Read more.
UPDATE! The community will be go into read-only on April 19, 8am Pacific in preparation for migration on April 21.Read more.
Absent Member.
Absent Member.
676 views

DAL Query - Check for group membership using User DN param

Hello everyone, in the past few days i was trying to execute a DAL query to retrieve the groups in witch a user DN (passed as the only parameter) figures as member.
Here is the problem:
When i try to execute the query in a onload event like this
IDVault.globalQuery("gruposAux2", "ObtenerGruposAprobadores", {"usuario":"cn=glatorre,ou=Users,o=organization"})
to fullfil a picklist field gruposAux2 , in the ua, in the requerest form i get this error:
gruposAux: Script error in idvault.globalQuery()



I not getting any more info in the catalatina.out log so i checked the DAL query definition and the Entity definition, both are consistent with others object thats work with the same logic. So then i checked the LDAP directory, and i think that the problem is that i can't execute a query to check a DN type field in the directory. Is this correct? How can i workarround this? i tried to call the query inside de DNQuery field too, an i getting this error message when i try to execute it inside the request form:

Ldap error querying for results. Error: javax.naming.directory.InvalidSearchFilterException: [LDAP: error code 18 - Inappropriate Matching]; remaining name 'OU=Groups,OU=Users,O=organization'

Thanks in advance for your help!!
Labels (1)
0 Likes
3 Replies
Absent Member.
Absent Member.

A group query for member DNs is possible and shouldn't cause issues when
setup correctly.

The error
[LDAP: error code 18 - Inappropriate Matching];
remaining name 'OU=Groups,OU=Users,O=organization'*
indicates that your query isn't correct.
Make sure to pass a valid user DN, the filter is set to "equals" (not
"contains"), and the query search base is valid.
If you don't find an issue of your query you might want to share some
details here.

Wolfgang


On 27/07/2018 18:34, gtejo wrote:
>
> Hello everyone, in the past few days i was trying to execute a DAL query
> to retrieve the groups in witch a user DN (passed as the only parameter)
> figures as member.
> Here is the problem:
> When i try to execute the query in a onload event like this
> *IDVault.globalQuery("gruposAux2", "ObtenerGruposAprobadores",
> {"usuario":"cn=glatorre,ou=Users,o=organization"})*
> to fullfil a picklist field gruposAux2 , in the ua, in the requerest
> form i get this error:
> *gruposAux: Script error in idvault.globalQuery()*
>
> [image: https://i.imgur.com/BAED5OK.png]
>
> I not getting any more info in the catalatina.out log so i checked the
> DAL query definition and the Entity definition, both are consistent with
> others object thats work with the same logic. So then i checked the LDAP
> directory, and i think that the problem is that i can't execute a query
> to check a DN type field in the directory. Is this correct? How can i
> workarround this? i tried to call the query inside de DNQuery field too,
> an i getting this error message when i try to execute it inside the
> request form:
>
> *Ldap error querying for results. Error:
> javax.naming.directory.InvalidSearchFilterException: [LDAP: error code
> 18 - Inappropriate Matching]; remaining name
> 'OU=Groups,OU=Users,O=organization'*
>
> Thanks in advance for your help!!
>
>

0 Likes
Absent Member.
Absent Member.

Okey, i cheked all the item's that you said, and the result is the same, still getting this error



Here is a picture of the DAL query:



There is any more info that i can show you? Thanks
0 Likes
Absent Member.
Absent Member.

Did you choose the search base 'OU=Groups,OU=Users,O=organization' with
Designer's object selector? It doesn't happen to be
'OU=Groups,O=organization'?

Can you copy the DN of a group that you expect to be found?

Wolfgang


On 27.07.2018 19:34, gtejo wrote:
>
> Okey, i cheked all the item's that you said, and the result is the same,
> still getting this error
>
> [image: https://i.imgur.com/fQomBnY.png]
>
> Here is a picture of the DAL query:
>
> [image: https://i.imgur.com/JsoswHn.png]
>
> There is any more info that i can show you? Thanks
>
>

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.