LDAP Dereference Control is defined in Internet Draft LDAP Dereference Control which expired in 2009
controlValue ::= SEQUENCE OF derefSpec DerefSpec DerefSpec ::= SEQUENCE { derefAttr attributeDescription, ; with DN syntax attributes AttributeList } AttributeList ::= SEQUENCE OF attr AttributeDescription
The derefAttr must be be a DN and of DN Syntax (1.3.6.1.4.1.1466.115.121.1.12).
Each derefSpec.derefAttr MUST be unique within controlValue.
controlValue ::= SEQUENCE OF derefRes DerefRes DerefRes ::= SEQUENCE { derefAttr AttributeDescription, derefVal LDAPDN, attrVals [0] PartialAttributeList OPTIONAL } PartialAttributeList ::= SEQUENCE OF partialAttribute PartialAttribute
PartialAttribute is defined in RFC 4511; the definition is reported here for clarity:
PartialAttribute ::= SEQUENCE { type AttributeDescription, vals SET OF value AttributeValue }If partialAttribute.vals is empty, the corresponding partialAttribute is omitted. If all partialAttribute.vals in attrVals are empty, that derefRes.attrVals is omitted.
LDAP Dereference Control This LDAP SupportedControl is currently implemented in OpenLDAP software using the temporary OID 1.3.6.1.4.1.4203.666.5.16 under OpenLDAP's experimental OID arc.