Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in / Register
Toggle navigation
Menu
Open sidebar
Joe Martin
OpenLDAP
Commits
1ce27eea
Commit
1ce27eea
authored
Jan 08, 2013
by
Pierangelo Masarati
Committed by
Quanah Gibson-Mount
Jan 09, 2013
Browse files
clarification about filtering for dynamically added attrs (ITS#7486)
parent
b19c8f25
Changes
1
Hide whitespace changes
Inline
Side-by-side
doc/man/man5/slapo-dynlist.5
View file @
1ce27eea
...
...
@@ -12,16 +12,23 @@ The
overlay to
.BR slapd (8)
allows expansion of dynamic groups and more.
Any time an entry with a specific objectClass is being returned,
the LDAP URI-valued occurrences of a specific attribute are
Any time an entry with a specific objectClass
(defined in the overlay configuration)
is being returned,
the LDAP URI-valued occurrences of a specific attribute
(also defined in the overlay configuration)
are
expanded into the corresponding entries, and the values
of the attributes listed in the URI are added to the original
entry.
No recursion is allowed, to avoid potential infinite loops.
Since the resulting entry is dynamically constructed,
it does not exist until it is constructed while being returned.
As a consequence, dynamically added attributes do not participate
in the filter matching phase of the search request handling.
In other words, \fIfiltering for dynamically added attributes always fails\fP.
The resulting entry must comply with the LDAP data model, so constraints
are enforced.
For example, if a \fISINGLE\-VALUE\fP attribute is listed,
only the first value
result
s in the final entry.
only the first value
found during the list expansion appear
s in the final entry.
The above described behavior is disabled when the \fImanageDSAit\fP
control (RFC 3296) is used.
In that case, the contents of the dynamic group entry is returned;
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment