by "Joe Kaplan" <joseph.e.kaplan@[EMAIL PROTECTED]
>
Jul 25, 2008 at 07:46 PM
Unfortunately, you can't use any type of substring filter type (a wildcard
essentially) on DN syntax attributes. They are only sup****ted on specific
attribute syntaxes and DN is not one of them. The limitation has to do
with
the way DNs are stored and how the AD LDAP query processor works.
You CAN do a substring filter type on a part of the DN such as (CN=joe*).
As to whether that will accomplish what you are trying to do or not... :)
Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"
http://www.directoryprogramming.net
--
<dankennedy24@[EMAIL PROTECTED]
> wrote in message
news:ecb26466-37e4-48e7-971f-0e898d32a1ac@[EMAIL PROTECTED]
> Hello,
> I'm confused on how a simple query using a wildcard with the DN
> filed would work. I know I can't use '*' in queries and am supposed
> to use \2a instead.... so, why won't this work?
>
> (&(&(objectCategory=person)(objectClass=user)(distinguishedName=cn
> \2a)))
>
> I've also tried it with a space between the cn and \2a.
>
>
> I would like to return a set of results such that users with a
> specific string in the DN are returned. I'm doing this simply in the
> LDP browser and ADUC queries tool if that makes any difference.
>
> Thanks for any help.