Re: DN matching rules

[Howard Chu <hyc@symas.com>]

Chris Card wrote:
> Hi,
>
> > > > > I see that openldap supports a number of matching rules for DNs,
> > > > > e.g. dnOneLevelMatch, dnSubtreeMatch, dnSubordinateMatch and
> > > > > dnSuperiorMatch.
> > > > >
> > > > > Please can someone point me to documentation about these matching
> > > > > rules? (Google doesn't seem to bring up much useful).
> > > >
> > > > RFC 4517, section 4.
> > > Thanks, but I don't see anything about these matching rules in
> > > Rfc4517 section 4.
> >
> > Substring assertion is discussed in section 3
>
> I'm not trying to awkward, but I don't see how that relates to my question.
>
> I understand how to use the matching rules syntactically, but
> I have not found documentation anywhere that describes how these matching rules work.
>
> I can try out examples and/or read the openldap source code to try and deduce their behaviour, but I'd
> prefer to see documentation.

This feature has been present in OpenLDAP since 2004.

https://www.openldap.org/its/private.cgi/Archive.Software%20Enhancements?id=3112;selectid=3112;usearchives=1

Nobody has asked for docs thus far, because everybody recognizes that 
subtree/onelevel/subordinate are the same as the corresponding LDAP search 
scopes, and their behavior is already specified.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/