AM 7.1- can the isMemberOf attribute in SunOne DS 6.X be used in an identity source mapping filter
3 years ago
Originally Published: 2010-06-21
Article Number
000066697
Applies To
Authentication Manager 7.1 (all)
All OS
Issue
AM 7.1- can the isMemberOf attribute in SunOne DS 6.X be used in an identity source mapping filter
In the Operations Console
Identity sources->manage existing.
Select the identity source
Go to the map tab

You will see Search Filter configured with the default value of (objectclass=inetOrgPerson)
Is it possible to filter on the attribute isMemberOf

Resolution
isMemberof are internally calculated, cannot be indexed and therefore cannot be used in search filters.

Reference the man page for SunDS 6.X for the information on isMemberOf(5dsat) as found in the below link:


http://docs.sun.com/app/docs/doc/819-0986/ismemberof-5dsat?l=en&a=view

Note the description section which states this value 1) cannot be indexed and 2) is not suitable for a search filter.

DESCRIPTION

      The values of this attribute are the DNs of static groups to which this entry belongs.

      This attribute values are calculated, thus cannot be indexed. Therefore this attribute should not be used in search filters.


Don't see what you're looking for?