Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
72:ldap_optional_attributes [2018/07/16 13:50] – [Optional Attributes] bkkr | 72:ldap_optional_attributes [2020/01/17 10:35] – [Optional Attributes] evt | ||
---|---|---|---|
Line 41: | Line 41: | ||
The syntax used to build up the filter expression is specified in RFC 2254. Some examples are provided below: | The syntax used to build up the filter expression is specified in RFC 2254. Some examples are provided below: | ||
- | ^Filter Expression^Meaning| | | + | ^Filter Expression^Meaning| | | |
- | |(objectClass=*)|All objects| | | + | |(objectClass=*)|All objects| | | |
- | |(sn=sm*)|All entries with a surname that starts with " | + | |(sn=sm*)|All entries with a surname that starts with " |
- | |(& | + | |(& |
- | |(& | + | |(& |
- | **NOTE**: In the <font inherit/ | + | **NOTE**: In the <font inherit/ |
There is a special memberOf keyword available on many LDAP directory servers. In the case of Microsoft Active Directory, groups are represented via entries of object class “group“ by default. The distinguished names of the group members are set in the member attributes of the group entry. On the other hand, the distinguished name of every group a user is part of is automatically set in a <font inherit/ | There is a special memberOf keyword available on many LDAP directory servers. In the case of Microsoft Active Directory, groups are represented via entries of object class “group“ by default. The distinguished names of the group members are set in the member attributes of the group entry. On the other hand, the distinguished name of every group a user is part of is automatically set in a <font inherit/ | ||
Line 74: | Line 74: | ||
The ondemandFilter must contain the placeholder character “%” that will be replaced by the username when queries on the LDAP repository are made. | The ondemandFilter must contain the placeholder character “%” that will be replaced by the username when queries on the LDAP repository are made. | ||
- | Example: '' | + | Example: '' |
=== The matchUsersMode Attribute === | === The matchUsersMode Attribute === | ||