This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
LDAP Three-valued logic
LDAP Three-valued logic

Version management

Difference between version and

At line 1 added 260 lines
!!! Overview
[{$pagename}] is defined in [RFC 2251] section-4.5.1.
A server MUST evaluate filters according to the three-valued logic of X.511(93) section 7.8.1. In summary, a filter is evaluated to either
* [TRUE]
* [FALSE]
* "Undefined"
!! [TRUE]
If the filter evaluates to TRUE for a particular entry, then the attributes of that entry are returned as part of the [Search Responses] (subject to any applicable access control restrictions).
!! [FALSE]
If the filter evaluates to __[FALSE] or Undefined__, then the entry is ignored for the search.
A [LDAP Filter Choice] of the "and" choice is [TRUE] if all the filters in the SET OF evaluate to [TRUE], [FALSE] if at least one filter is [FALSE], and otherwise Undefined.
A [LDAP Filter Choice] of the "or" choice is [FALSE] if all of the filters in the SET OF evaluate to FALSE, TRUE if at least one filter is TRUE, and Undefined otherwise.
A [LDAP Filter Choice] of the "not" choice is [TRUE] if the filter being negated is FALSE, FALSE if it is TRUE, and Undefined if it is Undefined.
The present match evaluates to [TRUE] where there is an attribute or subtype of the specified attribute description present in an entry, and FALSE otherwise (including a presence test with an unrecognized attribute description.)
The [extensibleMatch] is new in this version of LDAP. If the [matchingRule] field is absent, the type field [MUST] be present, and the [EQUALITY] match is performed for that type. If the type field is absent and [matchingRule] is present, the matchValue is compared against all attributes in an entry which support that matchingRule, and the matchingRule determines the syntax for the [Assertion Value] (the filter item evaluates to TRUE if it matches with at least one attribute in the entry, FALSE if it does not match any attribute in the entry, and Undefined if the matchingRule is not recognized or the [assertion Value] cannot be parsed.)
If the type field is present and matchingRule is present, the matchingRule [MUST] be one permitted for use with that type, otherwise the filter item is undefined. If the dnAttributes field is set to TRUE, the match is applied against all the attributes in an entry's [Distinguished Name] as well, and also evaluates to TRUE if there is at least one attribute in the distinguished name for which the filter item evaluates to TRUE. (Editors note: The dnAttributes field is present so that there does not need to be multiple versions of generic matching rules such as for word matching, one to apply to entries and another to apply to entries and dn attributes as well).
A filter item evaluates to Undefined when the server would not be able to determine whether the assertion value matches an entry. If an attribute description in an [equalityMatch], [substrings], [greaterOrEqual], [lessOrEqual], [approxMatch] or [extensibleMatch] filter is not recognized by the server, a matching rule id in the extensibleMatch is not recognized by the server, the assertion value cannot be parsed, or the type of filtering requested is not implemented, then the filter is Undefined. Thus for example if a server did not recognize the attribute type shoeSize, a filter of (shoeSize=*) would evaluate to FALSE, and the filters (shoeSize=12), (shoeSize>=12) and (shoeSize<=12) would evaluate to Undefined.
[Servers|DSA] [MUST NOT] return errors if attribute descriptions or matching rule ids are not recognized, or [Assertion Values] cannot be parsed.
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop