ando@sys-net.it wrote:

This patch allows to restrict a constraint to entries matching an LDAP URI; complements ITS#5702.

... in the sense that a constraint like

constraint_attribute cn,sn,givenName set "(this/givenName + [ ] + this/sn) & this/cn"

needs to be restricted to entries whose objectClass is derived from inetOrgPerson. This is accomplished by using

constraint_attribute cn,sn,givenName set "(this/givenName + [ ] + this/sn) & this/cn" restrict="ldap:///dc=example,dc=com??sub?(objectClass=inetOrgPerson)"

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando@sys-net.it -----------------------------------