The filter
(&(objectClass=ibmPerson)(notesShortName=cowboy))
=>
(&(!(objectclass=*))(!(objectClass=*)))
is being rewritten like that because the proxy does not know anything
about objectClass "ibmPerson" and attribute "notesShortName". You
should augment the proxy's schema in order to let it know about those
attributes, otherwise slapd will silently (as per RFC4511, and thus by
design) ignore the resulting undefined filter. There is one exception:
if the filter uses attributes/objectClasses that have already been
returned by the proxy, it will not result in an undefined filter, as
those attributes/objectClasses will be recognized as "proxied".
Undefined filters are replaced by instances of (!(objectClass=*)), which
is guaranteed to match nothing.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: [EMAIL PROTECTED]
-----------------------------------
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
