diff options
| author | Samuel Cabrero <samuelcabrero@kernevil.me> | 2014-10-24 17:52:47 +0200 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2016-01-18 04:42:21 +0100 |
| commit | 177ac584c9bc444b951596f0ca740c04182c9db8 (patch) | |
| tree | ba9d5f687aa1626fb32de2916b662dfe91c0a984 /lib/ldb-samba/ldb_matching_rules.h | |
| parent | a2d49fa74f2a4b3cf8b22f4b5686d18f3204fcfb (diff) | |
| download | samba-177ac584c9bc444b951596f0ca740c04182c9db8.tar.gz | |
ldb-samba: Implement transitive extended matching
Documented in [MS-ADTS] section 3.1.1.3.4.4.3 LDAP_MATCHING_RULE_TRANSITIVE_EVAL
This allows a search filter such as:
member:1.2.840.113556.1.4.1941:=cn=user,cn=users,dc=samba,dc=example,dc=com
This searches not only the member attribute, but also any member
attributes that point at an object with this member in them. All the
various DN syntax types are supported, not just plain DNs.
Signed-off-by: Samuel Cabrero <samuelcabrero@kernevil.me>
(abartlet: Fixed compile error: return makes integer from pointer without a cast)
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
(returned to Samba by revert of
dc2d5ccd56ff8c59f3686a652ec3082069914bb4, returning the original
commit 2a22ba34cd6f28950246b54c6577c922c61f4fdb)
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Adrian Cochrane <adrianc@catalyst.net.nz>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Diffstat (limited to 'lib/ldb-samba/ldb_matching_rules.h')
| -rw-r--r-- | lib/ldb-samba/ldb_matching_rules.h | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/lib/ldb-samba/ldb_matching_rules.h b/lib/ldb-samba/ldb_matching_rules.h new file mode 100644 index 00000000000..e969b3d47cf --- /dev/null +++ b/lib/ldb-samba/ldb_matching_rules.h @@ -0,0 +1,28 @@ +/* + Unix SMB/CIFS implementation. + + ldb database library - Extended match rules + + Copyright (C) 2014 Samuel Cabrero <samuelcabrero@kernevil.me> + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see <http://www.gnu.org/licenses/>. +*/ + +#ifndef _LDB_MATCHING_RULES_H_ +#define _LDB_MATCHING_RULES_H_ + +/* This rule provides recursive search of a link attribute */ +#define SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL "1.2.840.113556.1.4.1941" + +#endif /* _LDB_MATCHING_RULES_H_ */ |