.LP
The <naming context> part doesn't need to be unique across the targets;
it may also match one of the values of the "suffix" directive.
+Multiple URIs may be defined in a single argument. The URIs must
+be separated by TABs (e.g. '\\t'), and the additional URIs must have
+no <naming context> part. This causes the underlying library
+to contact the first server of the list that responds.
.TP
.B default-target [<target>]
The "default-target" directive can also be used during target specification.
This directive sets the password for acl checking in conjunction
with the above mentioned "binddn" directive.
.TP
+.B rebind-as-user
+If this option is given, the client's bind credentials are remembered
+for rebinds when chasing referrals.
+.TP
.B pseudorootdn "<substitute DN in case of rootdn bind>"
This directive, if present, sets the DN that will be substituted to
the bind DN if a bind with the backend's "rootdn" succeeds.
.nf
(default) if defined and no specific context
is available
-bindDn bind
+bindDN bind
searchBase search
searchFilter search
-compareDn compare
-addDn add
-modifyDn modify
-modrDn modrdn
-newSuperiorDn modrdn
-deleteDn delete
+compareDN compare
+compareAttrDN compare AVA
+addDN add
+addAttrDN add AVA
+modifyDN modify
+modifyAttrDN modify AVA
+modrDN modrdn
+newSuperiorDN modrdn
+deleteDN delete
.fi
.RE
.LP
searchResult search (only if defined; no default;
acts on DN and DN-syntax attributes
of search results)
-matchedDn all ops (only if defined; no default;
- NOT IMPL. except in search)
+searchAttrDN search AVA
+matchedDN all ops (only if applicable)
.fi
.RE
.LP
rewriteRule "[^,]+,ou=admin,dc=home,dc=net"
"%{*prefix}|(uid=%{*arg})(cn=%{*arg})%{*suffix}" "@I"
rewriteRule ".*<>" "%{*prefix}uid=%{*arg}%{*suffix}" ":"
+
+# This example shows how to strip unwanted DN-valued
+# attribute values from a search result; the first rule
+# matches DN values below "ou=People,dc=example,dc=com";
+# in case of match the rewriting exits successfully.
+# The second rule matches everything else and causes
+# the value to be rejected.
+rewriteContext searchResult
+rewriteRule ".*,ou=People,dc=example,dc=com" "%0" "@"
+rewriteRule ".*" "" "#"
.fi
.SH "LDAP Proxy resolution (a possible evolution of slapd\-ldap(5)):"
In case the rewritten DN is an LDAP URI, the operation is initiated
.BR slapd\-ldap (5),
.BR slapd (8),
.BR regex (7).
+.SH AUTHOR
+Pierangelo Masarati, based on back-ldap by Howard Chu