I've seen OpenLDAP directories that have a minimum character requirement for queries on the LDAP directory and I want to set that up on mine.

For example, the following search fails:


and the following search succeeds:


I can't remember what the error code was when it failed, but I think it was unwillingToPerform.

Does anybody know what setting I need to change to add this requirement?


I suspect you want to look at access control http://www.openldap.org/doc/admin21/guide.html#Access%20Control


The first filter you specified uid=* is not a substring search filter, it is known as a presence filter and is used to filter objects for return to the client that have the uid attribute. The other filter (uid=abc*) is a substring assertion filter. See also rfc4511.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.