Paul Millar [mailto:paul.millar@desy.de] said:
Well, I just wanted to point out it was possible to do these sorts of queries without using a ChunkKey entry.
... or maybe not; unless I'm missing something it seems you can't use wildcards in extensible queries: ldapsearch -x -h lcg-bdii.cern.ch -p 2170 -b o=grid '(&(GlueSEUniqueID:dn:*.ac.uk)(objectclass=GlueSA))' # extended LDIF # # LDAPv3 # base <o=grid> with scope sub # filter: (&(GlueSEUniqueID:dn:=*.ac.uk)(objectclass=GlueSA)) # requesting: ALL # ldapsearch: ldap_search_ext: Bad search filter (-7) If I replace the * with a specific name it works: ldapsearch -x -h lcg-bdii.cern.ch -p 2170 -b o=grid '(&(GlueSEUniqueID:dn:svr018.gla.scotgrid.ac.uk)(objectclass=GlueSA))' | grep GlueSAAccessControlBaseRule: GlueSAAccessControlBaseRule: atlas GlueSAAccessControlBaseRule: ngs GlueSAAccessControlBaseRule: totalep GlueSAAccessControlBaseRule: dteam GlueSAAccessControlBaseRule: atlas GlueSAAccessControlBaseRule: atlas GlueSAAccessControlBaseRule: camont GlueSAAccessControlBaseRule: pheno GlueSAAccessControlBaseRule: babar GlueSAAccessControlBaseRule: ops GlueSAAccessControlBaseRule: gridpp GlueSAAccessControlBaseRule: cms GlueSAAccessControlBaseRule: lhcb GlueSAAccessControlBaseRule: dzero GlueSAAccessControlBaseRule: sixt GlueSAAccessControlBaseRule: atlas GlueSAAccessControlBaseRule: biomed GlueSAAccessControlBaseRule: supernemo.vo.eu-egee.org GlueSAAccessControlBaseRule: ilc GlueSAAccessControlBaseRule: cdf GlueSAAccessControlBaseRule: alice GlueSAAccessControlBaseRule: zeus Stephen