0 permission(s) to create after filtreing

Dec 11, 2015 at 1:23 PM
Edited Dec 11, 2015 at 1:29 PM

We have a keyword attribute set up for our AD groups which we want to query to find the groups in SharePoint.
The attribute is a string containing keywords in this format:
keyword1; keyword2; keyword3 ...

Currently when we do a query with a keyword that is not the first one in the string (for example keyword2, keyword3) the ULS log tells us the following:

[LDAPCP] Got 1 result(s) from all LDAP server(s) with query
[LDAPCP] 0 permission(s) to create after filtering

So the LDAP query find the keyword but it is then filtered out by the code.

Our AD guy suggested that the following row in the BuildFilterAndProcessResults method could be the problem:
string value = resultPropertyCollection[attr.LDAPAttribute][0].ToString();
And that we instead need to loop thru each value in the resultPropertyCollection:
foreach (object value in resultPropertyCollection[attr.LDAPAttribute])
Would it be possible to achieve the result we want?
To be able to get a match for any of the keywords in the string?
Dec 29, 2015 at 11:47 AM
I will look into this and keep you posted