[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Limiting results of search through back-meta
> On Tue Jan 10 2006 at 17:47:37 CET, Pierangelo Masarati wrote:
>
>> > I have a back-meta set up on an OpenLDAP 2.3.11 to retrieve a tree
>> > (ou=People) from an OpenLDAP server inside a DMZ. There are a number
>> of
>> > entries which should not be returned if they contain an attribute type
>> > with a certain value. In escence the search filter would contain
>> > "(!(expiredDate=*))".
>> >
>> > The URI directive of back-meta doesn't appear to allow a filter
>> > specification. Is there any way I could accomplish this, perhaps
>> > with slapo-rwm, and could some kind soul give me an example?
>>
>> try
>>
>> access to filter="(expiredDate=*)"
>> by * none
>>
>
> Thank you for the answer (I'm ashamed of my ignorance), but it doesn't
> work
> if the LDAP client asks for specific attribute types. An `ldapsearch ...
> cn uid mail'
> gets through.
Good point. In that case, I think the most appropriate solution would be
that highlighted in ITS#3711 (may apply to back-ldap as well):
<http://www.openldap.org/its/index.cgi?findid=3711>
patches are welcome.
p.
Ing. Pierangelo Masarati
Responsabile Open Solution
OpenLDAP Core Team
SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
------------------------------------------
Office: +39.02.23998309
Mobile: +39.333.4963172
Email: pierangelo.masarati@sys-net.it
------------------------------------------