Novell LDAP Proxy 1.0 Administration Guide - NetIQ
Novell LDAP Proxy 1.0 Administration Guide - NetIQ
Novell LDAP Proxy 1.0 Administration Guide - NetIQ
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
• : The rule associated with the Search Request policy that is configured. The element can<br />
have the following child elements:<br />
• : The search-related conditions to be evaluated. This element can have the<br />
following child elements:<br />
• : The OR logical operator.<br />
• : The AND logical operator.<br />
• : The NOT logical operator.<br />
• : This type is specified by using the op attribute and defined<br />
either as equal or not-equal to some string values. The match value is defined either<br />
as case-exact or case-ignore.<br />
• : Specifies to evaluate for the specified base container. This type is<br />
specified by using the op attribute and defined either as equal or not-equal to some<br />
string values. The match value is defined either as case-exact or case-ignore.<br />
• : The search filter to be evaluated for. This element has the following<br />
attributes:<br />
• : The attributes to filter. The match value is defined as caseignore.<br />
• : The filter type to use for filtering. This element is defined by<br />
using the op attribute and values such as substrings, greater-or-equal, less-orequal,<br />
present, or approx-match.<br />
• : The scope of the search operation to be evaluated. The three types<br />
of search scope are base-object, one-level, and sub-tree. The match is<br />
controlled by using the op attribute, as specified in the sample configuration.<br />
Depending on how you want to configure the policy, the and <br />
elements can have the following child elements:<br />
• : Denies the search request.<br />
• : Performs the search request.<br />
• : Modifies a search request. This element uses the following<br />
child elements:<br />
• : An explanation about the modify search request.<br />
• : The modifications to be done on the search base. The modification is<br />
specified by using the op attribute. The two types of actions that can be<br />
specified are replace and append.<br />
• : The scope of the modify request. The three types of search scope are<br />
base-object, one-level, and sub-tree. If this element is not defined, the<br />
scope of the search is used to progress with the modify action.<br />
• : The time limit within which the modify request must be<br />
performed.<br />
• : The size limit of the number of values to be returned after<br />
evaluating the modify request.<br />
• : The attributes that must be returned after evaluating the<br />
modify search request.<br />
Manually Configuring <strong>Novell</strong> <strong>LDAP</strong> <strong>Proxy</strong> 43