We're updating the issue view to help you get more done. 

Improve syntax of ldap searchFilter and groupSearchFilter

Description

The searchFilter and groupSearchFilter values are a pain to define currently. For example, say you want to restrict by object class. You'd have to enter the search filter:

(&(uid={0})(objectClass=inetOrgPerson)

The (uid={0}) is redundant and MUST always be present in the filter. It would be much better if the user only had to define the extra filter parts that they wanted added, such as:

(objectClass=inetOrgPerson)

The code should then dynamically append the default filter. The same logic applies for the group filter.

I believe this change will be backwards compatible for users that defined the search filters in the old way. It would probably mean an actual query of something like:

(&(uid={0})(&(uid={0})(objectClass=inetOrgPerson))

Environment

None

Acceptance Test - Entry

None

Assignee

MattM

Reporter

MattM

Labels

None

Expected Effort

None

Ignite Forum URL

None

Components

Fix versions

Affects versions

Priority

Major
Configure