AD Search filters
Originally Published: 2019-08-02
Article Number
Applies To
RSA Product/Service Type: Enterprise Software
RSA Version/Condition: 7.0.2
Issue
I tested this issue in 7.0.2 GA - P06 and issue is reproduced when filter query has carriage return.
Cause
Failing Queries
1)
(&(objectCategory=person)
(objectClass=user)
(sAMAccountName=*))
2)
(&(objectCategory=person)(objectClass=user)
(sAMAccountName=*))
3) Below query will fail inside the configuration as well.
(&
(objectCategory=person)
(objectClass=user)
(sAMAccountName=*))
(&(objectCategory=person)(objectClass=user)(sAMAccountName=*)
(|(memberOf=CN=Group-1,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)
(memberOf=CN=Group-2,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)
(memberOf=CN=Group-3,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)
)
)
Resolution
Workaround
To resolve this issue, you can workaround this issue by removing the new line or apply P07 or higher(latest patch for IG&L 7.0.2 is P14)
Below are examples of working vs non-working filter queries as I tested:
Working filters (Where both Tests work fine)
1) (memberOf=CN=Group-1,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)
2) (&(objectCategory=person)(objectClass=user)(sAMAccountName=*)(|(memberOf=CN=Group-3,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)))
3) (&(objectCategory=person)(objectClass=user)(sAMAccountName=*)(|(memberOf=CN=Group-3,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)(memberOf=CN=Group-2,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)))
4) (&(objectCategory=person)(objectClass=user)(sAMAccountName=*)(|(memberOf=CN=Group-1,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)(memberOf=CN=Group-2,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)(memberOf=CN=Group-3,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)(memberOf=CN=Group-4,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)(memberOf=CN=Group-5,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)(memberOf=CN=Group-6,OU=vcloud Users,DC=2k8r2-vcloud,DC=local)))
Related Articles
Numeric Token Types in AMIS Calls Number of Views ManageEngine ADSelfService Plus - RSA Ready Implementation Guide Number of Views Troubleshooting SWIFT Alliance Access with RSA Authentication Manager using RADIUS protocol Number of Views Integrating RSA Authentication Agent with RSA Authentication Manager 8.1 Risk-Based Authentication Number of Views Uninstall a Web Tier on Linux Number of Views
Trending Articles
RSA-2026-10: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA-2026-05: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities RSA Authentication Manager Upgrade Process RSA-2026-04: RSA Governance and Lifecycle Security Update for SUSE Linux Enterprise Server Vulnerabilities
Don't see what you're looking for?
