Chris Card wrote:
Hi,
I see that openldap supports a number of matching rules for DNs,
e.g. dnOneLevelMatch, dnSubtreeMatch, dnSubordinateMatch and
dnSuperiorMatch.
Please can someone point me to documentation about these matching
rules? (Google doesn't seem to bring up much useful).
RFC 4517, section 4.
Thanks, but I don't see anything about these matching rules in
Rfc4517 section 4.
Substring assertion is discussed in section 3
I'm not trying to awkward, but I don't see how that relates to my question.
I understand how to use the matching rules syntactically, but
I have not found documentation anywhere that describes how these matching rules
work.
I can try out examples and/or read the openldap source code to try and deduce
their behaviour, but I'd
prefer to see documentation.
This feature has been present in OpenLDAP since 2004.
https://www.openldap.org/its/private.cgi/Archive.Software%20Enhancements?id=3112;selectid=3112;usearchives=1
Nobody has asked for docs thus far, because everybody recognizes that
subtree/onelevel/subordinate are the same as the corresponding LDAP search
scopes, and their behavior is already specified.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/