Re: Returning Matched Values with LDAPv3

["David Chadwick" <d.w.chadwick@salford.ac.uk>]

From:           	"Kurt D. Zeilenga" <Kurt@OpenLDAP.org>

> At 01:44 PM 10/17/00 -0500, david.a.cahlander@syntegra.com wrote: >It
> is not clear from the description if example (2) could return the
> result >on the basis of the name 'gunk' instead of on the basis of the
> OID. > >Does the substring filter capability allow a filter of the
> form: > >        (attributeTypes=*'gunk'*)
> 
> There is no substrings matching rule for attributeTypes, so this
> assertion is 'Undefined'.
> 
> I suggest the example use (attributeTypes=2.5.4.3) as the equality
> matching rule for attributeTypes is
> objectIdentifierFirstComponentMatch which requires an assertion value
> of syntax OID. 

Kurt, I dont understand why changing the example to retrieve cn 
rather than gunk will help the understanding. Further, since 
everyone already knows the definition of cn, one might ask why are 
we wanting to retrieve this definition!

> Some servers support (attributeTypes=cn) as well.

Then we need to formally specify a stringThirdComponent matching 
rule as an equality matching rule for attributeTypes, if we are to 
widely support this. (Note this is counting NAME as the second 
component). Should we do this? 

> 
> >If I knew the OID number of "gunk", the entire "attributeTypes"
> >attribute of the schema entry has probably been read, and I don't
> >need the LDAP extension to read it.
> 
> You need an LDAP extension to return only the matched values.
> 
> >An example to retrieve an "objectClasses" attribute would help.

to retrieve the objectClasses attribute definition the 
valuesReturnFilter would be ((attributeTypes=2.5.21.6))

to retrieve the complete objectClasses attribute from an entry, you 
dont need the valuesReturnFilter as you want all the values to be 
returned

to retrieve a specific objectClasses attribute value from the 
objectClasses attribute of an entry, the valuesReturnFilter would be
((objectClasses=<the oid of the object class you want to be 
returned>))

> 
>   (objectClasses=2.5.4.0)

Kurt, I am not quite sure what the above filter is meant to be

David

> 
> or
>   (objectClasses=objectclass)  // supported by some servers
> 
> Kurt
> 
> 


***************************************************

David Chadwick
IS Institute, University of Salford, Salford M5 4WT
Tel +44 161 295 5351  Fax +44 161 745 8169
Mobile +44 790 167 0359
Email D.W.Chadwick@salford.ac.uk
Home Page  http://www.salford.ac.uk/its024/chadwick.htm
Understanding X.500  http://www.salford.ac.uk/its024/X500.htm
X.500/LDAP Seminars http://www.salford.ac.uk/its024/seminars.htm
Entrust key validation string MLJ9-DU5T-HV8J

***************************************************