LDAP_MATCHING_RULE_BIT_AND (1.2.840.113556.1.4.803) is an ExtensibleMatch for a Bitwise AND operations on BIT STRING (Bitmask)

A match is found only if all bits from the Assertion Value match the Attribute Value. This rule is equivalent to a Bitwise AND Bitwise operation.[1]

We show examples of this Extensible Match usage under Filtering for Bit Fields and Active Directory Group Related Searches Not all LDAP Server Implementations provide all Matching Rules. The OIDs shown here are Microsoft Active Directory specific and will probably not work on other server implementations. We wish some of the other LDAP Server Implementations would add support for these Extensible Match Rules.

More Information#

There might be more information for this subject on one of the following:
[#1] - We obtained some of this information from http://msdn.microsoft.com/en-us/library/aa746475%28VS.85%29.aspx