RE: DN matching rules

[Chris Card <ctcard@hotmail.com>]

> >>>>> I see that openldap supports a number of matching rules for DNs,
> >>>>> e.g. dnOneLevelMatch, dnSubtreeMatch, dnSubordinateMatch and
> >>>>> dnSuperiorMatch.
<snip>
> > I have not found documentation anywhere that describes how these matching rules work.
> >
> > I can try out examples and/or read the openldap source code to try and deduce their behaviour, but I'd
> > prefer to see documentation.
>
> This feature has been present in OpenLDAP since 2004.
>
> https://www.openldap.org/its/private.cgi/Archive.Software%20Enhancements?id=3112;selectid=3112;usearchives=1
>
That link needs a login.

> Nobody has asked for docs thus far, because everybody recognizes that
> subtree/onelevel/subordinate are the same as the corresponding LDAP search
> scopes, and their behavior is already specified.

Ok, but there's no superior scope. Also, while it's possible to try and deduce behaviour by similarity of names and by experiment, that's not a foolproof method, which is why I asked for a link to documentation. What little documentation I did find indicates that these matching rules are 'experimental' and shouldn't be used in released code (http://www.openldap.org/faq/data/cache/200.html) - is that still the case?

Chris