Hi,
Unfortunately, I cannot find out any documentation on LDAP search for SM_USERGROUPS. However, I found a past case regarding SM_USERGROUPS.
In smtracedefault.log, following series of messages were written (with no sensitive data). They are for 'user1'.
Line-1:
[Start of call GetGroups.][][][][][][][][][SmDsUser.cpp:285][16:48:22.535][CSmDsUser::GetGroups][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][User ='uid=user1,ou=Users,dc=ca,dc=com'][][][][][][][]
Line-2:
[LDAP search of (|(&(objectclass=groupOfNames)(member=uid=user1,ou=Users,dc=ca,dc=com))(&(objectclass=groupOfUniqueNames)(uniqueMember=uid=user1,ou=Users,dc=ca,dc=com))(&(objectclass=group)(member=uid=user1,ou=Users,dc=ca,dc=com))) took 0 seconds and 15624 microseconds][][][][][][][][][SmDsLdapConnMgr.cpp:1159][16:48:22.550][CSmDsLdapConn::SearchExts][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
Line-3:
[Ldap Search callout succeeds.][][][][][][][][][SmDsLdapProvider.cpp:2145][16:48:22.550][CSmDsLdapProvider::Search][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][(Search) Base: 'dc=ca,dc=com', Filter: '(|(&(objectclass=groupOfNames)(member=uid=user1,ou=Users,dc=ca,dc=com))(&(objectclass=groupOfUniqueNames)(uniqueMember=uid=user1,ou=Users,dc=ca,dc=com))(&(objectclass=group)(member=uid=user1,ou=Users,dc=ca,dc=com)))'. Status: 150 entries][][][][][][][]
In the Line-2, LDAP search is done for three expressions with OR operator '|'.
- (&(objectclass=groupOfNames)(member=uid=user1,ou=Users,dc=ca,dc=com))
- (&(objectclass=groupOfUniqueNames)(uniqueMember=uid=user1,ou=Users,dc=ca,dc=com))
- (&(objectclass=group)(member=uid=user1,ou=Users,dc=ca,dc=com))
I hope this would help.
Regards,
Koichi