Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've seen OpenLDAP directories that have a minimum character requirement for queries on the LDAP directory and I want to set that up on mine.

For example, the following search fails:


and the following search succeeds:


I can't remember what the error code was when it failed, but I think it was unwillingToPerform.

Does anybody know what setting I need to change to add this requirement?

share|improve this question

I suspect you want to look at access control

share|improve this answer

The first filter you specified uid=* is not a substring search filter, it is known as a presence filter and is used to filter objects for return to the client that have the uid attribute. The other filter (uid=abc*) is a substring assertion filter. See also rfc4511.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.