When performing subgroup searches, an LDAP search with scope base is issued on the DN of a group with a hard-coded filter of "cn=*". If the group does not have a cn, the search will fail.
Since we simply want to get the group members, the default filter of "objectClass=*" should be used. A patch is attached that sets the filter to NULL, which defaults to "objectClass=*".
oc.patch
Description: Binary data
--------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
