Please be aware that the content in SAP SQL Anywhere Forum will be migrated to the SAP Community in June and this forum will be retired.

In an Anywhere 17 database users authenticate to a LDAP server (a Windows Domain Controller).

Using the LDAP URL "ldap://, dc=mycompany, dc=de??sub?(sAMAccountName=*)" works fine for this.

Now I wanted to allow my users to use either their account name or their principle name (aka mail address) using the LDAP URL

ldap://, dc=mycompany, dc=de??sub?(|(userPrincipalName=*)(sAMAccountName=*))

without success.

Using Wireshark I found out that the database server seems to replace the first asterisk in the filter restriction with the account name to be verified, so the filter used in the search is something like "(|(*))", which obviously does not return the expected result...

Is this intended behaviour? Otherwise I'd suggest to replace all asterisks in the filter restriction, not just the first one.

N.B.: We found a workaround by creating two different LDAP servers in the database server, which is acceptable but a bit awkward.

asked 21 May '21, 11:39

tedfroehlich's gravatar image

accept rate: 18%

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 21 May '21, 11:39

question was seen: 752 times

last updated: 21 May '21, 11:39