X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.util%2Fsrc%2Forg%2Fargeo%2Futil%2Fdirectory%2Fldap%2FLdapDao.java;h=c33b50f65fb9a1a781bb62de4535b63b25198c63;hb=336930c69f0cd3e1242e518479624c6366541275;hp=d93fb7fdf62074d5be80f53563a41992bb50aa69;hpb=3066d79e3ced9339679672242bdf2340a03e1f29;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.util/src/org/argeo/util/directory/ldap/LdapDao.java b/org.argeo.util/src/org/argeo/util/directory/ldap/LdapDao.java
index d93fb7fdf..c33b50f65 100644
--- a/org.argeo.util/src/org/argeo/util/directory/ldap/LdapDao.java
+++ b/org.argeo.util/src/org/argeo/util/directory/ldap/LdapDao.java
@@ -83,8 +83,9 @@ public class LdapDao extends AbstractLdapDirectoryDao {
 //			int roleType = roleType(name);
 			LdapEntry res;
 			Rdn technicalRdn = LdapNameUtils.getParentRdn(name);
-			if (getDirectory().getGroupBaseRdn().equals(technicalRdn)
-					|| getDirectory().getSystemRoleBaseRdn().equals(technicalRdn))
+			if (getDirectory().getGroupBaseRdn().equals(technicalRdn))
+				res = newGroup(name, attrs);
+			else if (getDirectory().getSystemRoleBaseRdn().equals(technicalRdn))
 				res = newGroup(name, attrs);
 			else if (getDirectory().getUserBaseRdn().equals(technicalRdn))
 				res = newUser(name, attrs);
@@ -218,6 +219,8 @@ public class LdapDao extends AbstractLdapDirectoryDao {
 		try {
 			String searchFilter = "(|(" + objectClass + "=" + LdapObjs.organizationalUnit.name() + ")(" + objectClass
 					+ "=" + LdapObjs.organization.name() + "))";
+//			String searchFilter = "(|(" + objectClass + "=" + LdapObjs.organizationalUnit.name() + ")(" + objectClass
+//					+ "=" + LdapObjs.organization.name() + ")(cn=accounts)(cn=users)(cn=groups))";
 
 			SearchControls searchControls = new SearchControls();
 			searchControls.setSearchScope(SearchControls.ONELEVEL_SCOPE);
@@ -248,7 +251,7 @@ public class LdapDao extends AbstractLdapDirectoryDao {
 			if (getDirectory().getBaseDn().equals(dn))
 				return getDirectory();
 			if (!dn.startsWith(getDirectory().getBaseDn()))
-				throw new IllegalArgumentException(dn + " does not start with abse DN " + getDirectory().getBaseDn());
+				throw new IllegalArgumentException(dn + " does not start with base DN " + getDirectory().getBaseDn());
 			Attributes attrs = ldapConnection.getAttributes(dn);
 			return new LdapHierarchyUnit(getDirectory(), dn, attrs);
 		} catch (NamingException e) {