Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've seen OpenLDAP directories that have a minimum character requirement for queries on the LDAP directory and I want to set that up on mine.

For example, the following search fails:

(uid=*)

and the following search succeeds:

(uid=abc*)

I can't remember what the error code was when it failed, but I think it was unwillingToPerform.

Does anybody know what setting I need to change to add this requirement?

share|improve this question
add comment

2 Answers

I suspect you want to look at access control http://www.openldap.org/doc/admin21/guide.html#Access%20Control

share|improve this answer
add comment

The first filter you specified uid=* is not a substring search filter, it is known as a presence filter and is used to filter objects for return to the client that have the uid attribute. The other filter (uid=abc*) is a substring assertion filter. See also rfc4511.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.