Re: (ITS#5704) [enhancement] allow restrictions in slapo-constraint(5)

[ando@sys-net.it]

ando@sys-net.it wrote:

> This patch allows to restrict a constraint to entries matching an LDAP URI;
> complements ITS#5702.

... in the sense that a constraint like

constraint_attribute    cn,sn,givenName set
   "(this/givenName + [ ] + this/sn) & this/cn"

needs to be restricted to entries whose objectClass is derived from 
inetOrgPerson.  This is accomplished by using

constraint_attribute    cn,sn,givenName set
   "(this/givenName + [ ] + this/sn) & this/cn"
   restrict="ldap:///dc=example,dc=com??sub?(objectClass=inetOrgPerson)"

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------