Table 6-1 Ldif Target Keywords - Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual

Creating ACIs Manually
• An attribute value, or a combination of values, that match a specified LDAP
filter, as described in "Targeting Attribute Values Using LDAP Filters," on
page 213.
The general syntax for a target is:
(keyword = "expression")
(keyword != "expression")
where:
H
H
H
The quotation marks ("") around
is dependent upon the
The following table lists each keyword and the associated expressions:
Table 6-1
Keyword
target
targetattr
targetfilter
targattrfilters
In all cases, you must keep in mind that when you place an ACI on an entry, if it is
not a leaf entry, the ACI also applies to all entries below it. For example, if you
target the entry
will apply to all entries in the accounting branch of the
As a counter example, if you place an ACI on the
ou=accounting,dc=example,dc=com
uid=sarette,ou=people,dc=example,dc=com
under the accounting tree.
208 Red Hat Directory Server Administrator's Guide • May 2005
indicates the type of target.
keyword
equal (=) indicates that the target is the object specified in the
and not equal (!=) indicates the target is not the object specified in the
.
expression
identifies the target.
expression
keyword
LDIF Target Keywords
Valid Expressions
ldap:///distinguished_name
attribute
LDAP_filter
LDAP_operation:LDAP_filter
ou=accounting,dc=example,dc=com
are required. What you use for
expression
that you supply.
entry, you cannot target the
entry because it is not located
expression
expression
Wildcard
Allowed?
yes
yes
yes
yes
, the permissions you set
tree.
example.com
,