[glue-wg] GlueChunkKey

[Burke, S (Stephen)]

Paul Millar [mailto:paul.millar at desy.de] said:
> Well, I just wanted to point out it was possible to do these 
> sorts of queries without using a ChunkKey entry.

... or maybe not; unless I'm missing something it seems you can't use
wildcards in extensible queries:

ldapsearch -x -h lcg-bdii.cern.ch -p 2170 -b o=grid
'(&(GlueSEUniqueID:dn:*.ac.uk)(objectclass=GlueSA))'
# extended LDIF
#
# LDAPv3
# base <o=grid> with scope sub
# filter: (&(GlueSEUniqueID:dn:=*.ac.uk)(objectclass=GlueSA))
# requesting: ALL
#

ldapsearch: ldap_search_ext: Bad search filter (-7)

If I replace the * with a specific name it works:

ldapsearch -x -h lcg-bdii.cern.ch -p 2170 -b o=grid
'(&(GlueSEUniqueID:dn:svr018.gla.scotgrid.ac.uk)(objectclass=GlueSA))' |
grep GlueSAAccessControlBaseRule:
GlueSAAccessControlBaseRule: atlas
GlueSAAccessControlBaseRule: ngs
GlueSAAccessControlBaseRule: totalep
GlueSAAccessControlBaseRule: dteam
GlueSAAccessControlBaseRule: atlas
GlueSAAccessControlBaseRule: atlas
GlueSAAccessControlBaseRule: camont
GlueSAAccessControlBaseRule: pheno
GlueSAAccessControlBaseRule: babar
GlueSAAccessControlBaseRule: ops
GlueSAAccessControlBaseRule: gridpp
GlueSAAccessControlBaseRule: cms
GlueSAAccessControlBaseRule: lhcb
GlueSAAccessControlBaseRule: dzero
GlueSAAccessControlBaseRule: sixt
GlueSAAccessControlBaseRule: atlas
GlueSAAccessControlBaseRule: biomed
GlueSAAccessControlBaseRule: supernemo.vo.eu-egee.org
GlueSAAccessControlBaseRule: ilc
GlueSAAccessControlBaseRule: cdf
GlueSAAccessControlBaseRule: alice
GlueSAAccessControlBaseRule: zeus

Stephen