Netscape DIRECTORY SERVER 6.02 - ADMINISTRATOR Administrator's Manual page 207

NOTE The timeofday keyword also supports the inequality expressions
(<, <=, >, >=). This is the only keyword that supports these
expressions.
The quotation marks (
required. The expressions you can use depend on the associated
The following table lists each keyword and the associated expressions. It also
indicates whether wildcard characters are allowed in the expression.
LDIF Bind Rule Keywords
Table 6-2
Keyword
userdn
groupdn
roledn
userattr
ip
dns
dayofweek
timeofday
) around
expression
""
Valid Expressions
ldap:///distinguished_name
ldap:///all
ldap:///anyone
ldap:///self
ldap:///parent
ldap:///suffix??sub?(filter)
ldap:///DN || DN
ldap:///DN || DN
attribute#bindType or
attribute#value
IP_address
DNS_host_name
sun
mon
tue
wed
thu
fri
sat
0 - 2359
and the delimiting semicolon (;) are
Wildcard Allowed?
yes, in DN only
no
no
no
yes
yes
no
no
Chapter 6 Managing Access Control
Bind Rules
.
keyword
207