> can I filter/query based on something like: > > (&(cn=dhicks)(uid=123456789))
The only thing you'd have to perform the query is the resolved principal ID, which would be the uid in your case. I'm having trouble imagining a directory where uid isn't globally unique for a particular branch. We have a DIT much like yours based on the little you've shared and a query like uid=12345 would produce a single result in our directory. Can you explain why you'd need the CN (which is presumably the username provided in the login form) in the query above? M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
