Is multiple filters supported in LDAP Read-Only sync

Hi All,One of our clients wants to put multiple filters when using LDAP Read-Only Sync. The manual doesn't mention anything about that and we've tried different syntax with no luck. Does any one know if multiple filters is supported?Thanks.Edwin

Find more posts tagged with

Comments

Geoff_Obbard

Message from Geoff Obbard <<A HREF="mailto:gobbard@opentext.com">gobbard@opentext.com> via eLink

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">Message

Hi Edwin,

Directory Services does not support having multiple search filters. However, provided that all users to be synchronised can be found within a single search root, a single search filter should suffice. You can enter multiple criteria in a single search filter by surrounding them with an "or" clause (identified by the pipe character, "|").

For example, if my current search filter is (&(objectClass=inetOrgPerson)(ou=Customer Support)), and I also want to synchronise developers, (&(objectClass=inetOrgPerson)(ou=Product Development)). Instead of having Livelink perform two searches, I could simply change my search filter to (&(objectClass=inetOrgPerson)(|(ou=Customer Support)(ou=Product Development))) to get the same results with one filter.

Details on constructing LDAP search filters can be found in RFC 2254, "The String Representation of LDAP Search Filters" (http://www.ietf.org/rfc/rfc2254.txt).

Geoff Obbard
Senior Product Specialist
Customer Support
Open Text Corporation

-----Original Message-----

Is multiple filters supported in LDAP Read-Only sync

Posted by epun (Pun, Edwin) on 06/17/2003 12:48 AM

Hi All,

One of our clients wants to put multiple filters when using LDAP Read-Only Sync. The manual doesn't mention anything about that and we've tried different syntax with no luck. Does any one know if multiple filters is supported?

Thanks.

Edwin

Rob_Clarke_(deltaschemeuser1_-_(deleted))

I have a further query on this. We have a client that has an ou which only contains groups. The group members actually reside in another OU altogether. Currently we sync to the OU, and we have developed an overide to determine the group membership, which works fine. However, I think from your reply that we could also sync the OU that the users reside in, and their group membership would be created. To complicate matters, their active directory ou is not unique - there are multiple departments, eg Finance, Sales etc that each contains ous named 'Users and Groups'. I would think that putting in ou=Users and Groups would also sync the other ous - which is what I don't want.Hence to correct this, can I also put in the structure into the query to make it specific to sales? eg (&(objectclass=Group)(|(ou=LivelinkSyncGroup)(ou=Users and Groups,ou=Sales)))Your comments would be appreciated.Rob Clarke

James_Schumacher_(eu0017475_-_(deleted))

We have all of our users in a Users OU, but then we make them member of multiple CNs which reside in a completly different OU. We have not been able to get the search filter to capture any of them, yet our syntax is identicle to your... Any advice?