nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

ldap query 'queryGroupsForUser' is not working

slag

I'm running Activiti 5.16.3 with an ldap connection configured.

I noticed that assigning a task to someone else didn't work and started debugging the ldap part.

The ldapsearch <property name="queryGroupsForUser" value="(&(objectClass=groupOfNames)(member={0}))" /> is wrongly implemented
In the ldap server log i noticed this query: (&(objectClass=inetOrgPerson)(|(givenName=*%sebas%*)(sn=*%sebas%*))).

This query doesn't work because the '%' is added. I guess this is there to have like in a database.

Any idea where i can remove the '%'

Find more posts tagged with

Comments

slag

looks like the query itself fell of:
<code>
<property name="queryUserByFullNameLike" value="(&(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*)))" />
</code>

jbarrez

Where did you find this query?

I can only find that query in a test configuration xml, and it the userguide as an example for ApacheDS.

slag

<code>
<property name="queryUserByFullNameLike" value="(&(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*)))" />
</code>
This is configured in activiti-standalone-context.xml
http://www.activiti.org/userguide/#ldap_configuration (chapter 17.3)
<code>
(&(objectClass=inetOrgPerson)(|(givenName=*%sebas%*)(sn=*%sebas%*)))
</code>
This is the ldapsearch that is performed. It shows the queries in the ldaplog.
We are using openldap.

jbarrez

Sure, but this is just an example. You are supposed to change it to your LDAP system. LDAP queries are not portable between systems

slag

I did change the ldap query and it works in an ldap browser.
The Issue i have is that activiti adds a "%" signs to my query.

"*" is the wildcard character in LDAP.
My query contains: *{1}*. This should result in *sebas*.
The result however according to the log on the ldap server is *%sebas%*

I think that activiti adds the "%" since it is the wildcard for MYSQL.

For the record: this the the query i have configured in activiti-standalone-context.xml
<code>
"(&(objectClass=inetOrgPerson)(|({0}=*{1}*)({2}=*{3}*)))"
</code>
As you can see there is no "%" sign in my query

The result on the ldap server is:
<code>
(&(objectClass=inetOrgPerson)(|(givenName=*%sebas%*)(sn=*%sebas%*)))
</code>
As you can see a % sign is added.

slag

I think i bumped into this bug.
http://forums.activiti.org/content/user-form-type-does-not-show-users-when-using-ldap

I will further investigate.

slag

You can close this thread.
It should be fixed in later versions.