000024377 - Admingui: 'Advanced search' not returning the correct result when filtering using user's properties

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000024377
Applies ToClearTrust Entitlements Mgr (Java) 5.5.3
Admingui version 5.5.3.99 or older
Issue"Advanced search" not returning the correct result when filtering using user's properties
Cause

It has been reported that when trying to use the "Advanced search" functionality in order to selectively list members of a group, the results
shown is incorrect, if properties only are used as filtering criteria.

A short example:

If the filtering criteria specifies to search all users whose property LOCATION starts with MELB the result will show all group members, regardless of the respective value of the LOCATION property.

Eserver.log will contain the following entry, clearly indicating that no filtering criteria are being applied:

sequence_number=79,2006-09-28 11:42:20:801 EST,conn=0,op=77,messageID=723,ip=192.168.51.108,uname=admin,msg=Get users for
group by range,msgtype=READ,result=0,etime=60ms,start=0,end=11,uid=AAAAAQEAAAADU1FMAAAABlRlc3R2MgAAAAEJAAAAAAAAUnA=

On the other hand, if  you filter based on a property's value AND we also filter on a second criteria (like username starts with m) the result returned is correct.

Eserver.log will contain the following:

sequence_number=95,2006-09-28 11:42:41:383 EST,conn=0,op=93,messageID=713,ip=192.168.51.108,uname=admin,msg=Get user
search results by range,msgtype=READ,result=0,etime=7ms,filter=(&(User.LOCATION ==MELB*)(User.memberOf == Administrators)(User.name== A*)),start=0,end=11

Eserver's log level needs to be set to 40 in order to obtain the logging entries shown above.

ResolutionIn order to fix this issue please contact Customer Support and ask for HotFix 5.5.3.100.
Legacy Article IDa32082

Attachments

    Outcomes