Netscape DIRECTORY SERVER 6.1 - ADMINISTRATOR Administrator's Manual page 202

Creating ACIs Manually
• (target="ldap:///uid=*,dc=example,dc=com")
Matches every entry in the entire
the entry's RDN.
• (target="ldap:///uid=*Anderson,dc=example,dc=com")
Matches every entry directly under the
in Anderson.
• (target="ldap:///uid=C*A,dc=example,dc=com")
Matches every entry directly under the
beginning with C and ending with A.
Depending on the position of the wildcard, it can apply to the full DN, not only to
attribute values. Therefore, the wildcard can be used as a substitute for portions of
the DN. For example,
entries in the entire
the entries that are immediately below the
words, this target matches with longer expressions such as
uid=andy,ou=eng,dc=example,dc=com
uid=andy,ou=marketing,dc=example,dc=com
Some other valid examples follow:
• (target="ldap:///uid=*,dc=example,dc=com")
Matches every entry in the entire
the entry's RDN.
• (target="ldap:///uid=*,ou=*,dc=example,dc=com")
Matches every entry in the
contains the
uid=fchen,ou=Engineering,dc=example,dc=com
or
uid=claire,ou=Engineering,ou=people,dc=example,dc=com
would match, but the following would not:
uid=bjensen,dc=example,dc=com
ou=Engineering,dc=example,dc=com
202 Netscape Directory Server Administrator's Guide • August 2002
example.com
uid=andy*,dc=example,dc=com
tree with a matching uid attribute, and not just
example.com
example.com
example.com
and attributes. Thus:
uid ou
tree that has the
node with a
example.com
node with a
example.com
targets all the directory
dc=example,dc=com
, or
.
tree that has the
tree whose distinguished name
attribute in
uid
ending
uid
uid
node. In other
attribute in
uid