Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
72:ldap_optional_attributes [2018/07/16 13:54]
bkkr [Optional Attributes]
72:ldap_optional_attributes [2018/11/08 09:14] (current)
etea [Optional Attributes]
Line 47: Line 47:
 |(&​(objectClass=user)(!age<​18)<​font inherit/​Arial,​Helvetica,​sans-serif;;​inherit;;​inherit>​(</​font>​|(sn=smith)(sn=wright)))|All entries that are users having surname set to "​smith"​ or "​wright"​ and are older than 18| | |(&​(objectClass=user)(!age<​18)<​font inherit/​Arial,​Helvetica,​sans-serif;;​inherit;;​inherit>​(</​font>​|(sn=smith)(sn=wright)))|All entries that are users having surname set to "​smith"​ or "​wright"​ and are older than 18| |
  
-**NOTE**: In the <font inherit/​Courier New,​Courier,​monospace;;​inherit;;​inherit>​PKitConfig.xml</​font>​ file the character “&“ has to be escaped via “&​“. Otherwise errors parsing the configuration file could occur.+**NOTE**: In the <font inherit/​Courier New,​Courier,​monospace;;​inherit;;​inherit>​Config.xml</​font>​ file the character “&“ has to be escaped via “&​“. Otherwise errors parsing the configuration file could occur.
  
 There is a special memberOf keyword available on many LDAP directory servers. In the case of Microsoft Active Directory, groups are represented via entries of object class “group“ by default. The distinguished names of the group members are set in the member attributes of the group entry. On the other hand, the distinguished name of every group a user is part of is automatically set in a <font inherit/​Courier New,​Courier,​monospace;;​inherit;;​inherit>​memberOf</​font>​attribute of the user entry. There is a special memberOf keyword available on many LDAP directory servers. In the case of Microsoft Active Directory, groups are represented via entries of object class “group“ by default. The distinguished names of the group members are set in the member attributes of the group entry. On the other hand, the distinguished name of every group a user is part of is automatically set in a <font inherit/​Courier New,​Courier,​monospace;;​inherit;;​inherit>​memberOf</​font>​attribute of the user entry.