Re: ds_search

pays@faugeres.inria.fr Wed, 20 October 1993 22:34 UTC

Received: from ietf.nri.reston.va.us by IETF.CNRI.Reston.VA.US id aa18668; 20 Oct 93 18:34 EDT
Received: from CNRI.RESTON.VA.US by IETF.CNRI.Reston.VA.US id aa18664; 20 Oct 93 18:34 EDT
Received: from haig.cs.ucl.ac.uk by CNRI.Reston.VA.US id aa28329; 20 Oct 93 18:34 EDT
Received: from bells.cs.ucl.ac.uk by haig.cs.ucl.ac.uk with local SMTP id <g.08329-0@haig.cs.ucl.ac.uk>; Wed, 20 Oct 1993 22:49:55 +0100
Received: from faugeres.inria.fr by bells.cs.ucl.ac.uk with Internet SMTP id <g.24540-0@bells.cs.ucl.ac.uk>; Wed, 20 Oct 1993 22:49:46 +0100
X400-Received: by /PRMD=inria/ADMD=atlas/C=fr/; Relayed; 20 Oct 93 22:47:15+0100
Date: 20 Oct 93 22:47:15+0100
Sender: ietf-archive-request@IETF.CNRI.Reston.VA.US
From: pays@faugeres.inria.fr
To: ISODE@nic.ddn.mil, osi-ds@cs.ucl.ac.uk, quipu@cs.ucl.ac.uk, cross@ae.eds.com
Subject: Re: ds_search
Message-ID: <751153635.19362.0-faugeres.inria.fr*@MHS>

>
> When using the api and the ds_search() call, I attempted to do a
> search from c=us level and got:
> 
>   *** Service error: Unwilling to perform ***
> 
> I understand why this type of search would be discouraged/thwarted,
> but is there any way around it?  My DSA will be internal, so I would
> only be hitting a few DSAs.
> 


The only solution is to make another request 
	with at least information about the organisation to be searched

either
	base object: C=us; O=xxx;
	filter: the name searched for

or 
  1. 	base: C=Us;
	filter: O=xxx;
 
then with the result obtained

  2.	base:	C=us; O=xxxx;		--value returned by 1.
	filter:  the name searched for

the process might have to be extended to one additional OU


regards,

-- PAP