08-27-2010 12:42 AM - edited 03-16-2019 12:29 AM
Hi,
I was trying to filter LDAP import based upon LDPA ipPhone value. Filtering empty ipPhone is working with:
09-04-2010 01:40 AM
Hi
Yeah... I've tried doing it as well and it doesn't work.
best thing to do is get access to the 'AD Users and Computers' MMC, and then run custom searches with your intended filter. Test it to death before trying to put it in CCM.
What I found was:
>= works OK for text comparisons (e.g. >=Bob) but not brilliantly... and doesn't work well at all for numeric comparisons.
ipPhone=1* works, so you can do multiple of those e.g. put something like this in your filter string for anythign starting 1 or 2:
(|(ipPhone=1*)(ipPhone=2*))
I guess since the contents of ipPhone and other fields such a telephoneNumber are actually strings, not integers, it doesn't work the way you would expect; it's comparing dictionary order rather than numeric.
Regards
Aaron
Please rate helpful posts...
09-04-2010 03:43 AM
Hi Aaron,
Yes, i found out what You wrote. Comparing text will works ( =23* or =1* and so on ). Maight be converting ascii string in Hex i can use > or >, but I'm not a programmer so.... it's ok like this, with some "or" operator is ok.
many thanks
Luigi
09-04-2010 10:50 AM
I think that's as good as you'll get; if you convert to hex it'll probably just see it as literal text as that's what it expects to be sent.
Regards
Aaron
02-03-2012 12:32 PM
Hello there,
I am trying to make a filter for LDAP using the ipPhone field as well. Which part of your filter above would i use to do that?
I just want users that have the ipPhone field filled out to show up in the directory
right now all users show up
I tried the following filter someone showed me but not luck
(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4.803:=2))(ipPhone=*))
thanks for any help!
02-03-2012 12:46 PM
Use this:
(&(objectclass=user)(!(objectclass=Computer))(|(ipPhone=+*)(ipPhone=1*)(ipPhone=2*)(ipPhone=3*)(ipPhone=4*)(ipPhone=5*)(ipPhone=6*)(ipPhone=7*)(ipPhone=8*)(ipPhone=9*)(ipPhone=0*)))
HTH,
Chris
02-03-2012 01:46 PM
Hi Chris,
I just tried your filter and it stills shows all the users.
would it show immediately on the system or do i need to wait for some cleanup?
thanks
02-03-2012 01:48 PM
You have to re-sync, did you perform a manual sync? If so it should take several minutes depending on how many users are in your LDAP, and then all users that are no longer matched will be changed to INACTIVE state, they will be completly gone at 3 AM or so next day.
HTH,
Chris
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide