Environment
Self Service Password Reset
SSPR 3.3
SSPR 3.3
Situation
When Help Desk user enters a name in the search field no results are found
Search progress indicator does not stop running
Search progress indicator does not stop running
Resolution
Fix the LDAP search filter. In this case, remove the * from the beginning of each
attribute criteria.
Original (problem) search filter:
(&(objectClass=Person)(|(cn=*%USERNAME%*)(uid=*%USERNAME%*)(sAMAccountName=*%USERNAME%*)(userprincipalname=*%USERNAME%*)(givenName=*%USERNAME%*)(sn=*%USERNAME%*)))
Resolved (working) Search Filter
(&(objectClass=Person)(|(cn=%USERNAME%*)(uid=%USERNAME%*)(sAMAccountName=%USERNAME%*)(userprincipalname=%USERNAME%*)(givenName=%USERNAME%*)(sn=%USERNAME%*)))
It is also recommended that the search filter be simplified to only include attributes that have values present in the LDAP directory, and that would assist the help desk to find users.
Original (problem) search filter:
(&(objectClass=Person)(|(cn=*%USERNAME%*)(uid=*%USERNAME%*)(sAMAccountName=*%USERNAME%*)(userprincipalname=*%USERNAME%*)(givenName=*%USERNAME%*)(sn=*%USERNAME%*)))
Resolved (working) Search Filter
(&(objectClass=Person)(|(cn=%USERNAME%*)(uid=%USERNAME%*)(sAMAccountName=%USERNAME%*)(userprincipalname=%USERNAME%*)(givenName=%USERNAME%*)(sn=%USERNAME%*)))
It is also recommended that the search filter be simplified to only include attributes that have values present in the LDAP directory, and that would assist the help desk to find users.