From 177ac584c9bc444b951596f0ca740c04182c9db8 Mon Sep 17 00:00:00 2001 From: Samuel Cabrero Date: Fri, 24 Oct 2014 17:52:47 +0200 Subject: ldb-samba: Implement transitive extended matching Documented in [MS-ADTS] section 3.1.1.3.4.4.3 LDAP_MATCHING_RULE_TRANSITIVE_EVAL This allows a search filter such as: member:1.2.840.113556.1.4.1941:=cn=user,cn=users,dc=samba,dc=example,dc=com This searches not only the member attribute, but also any member attributes that point at an object with this member in them. All the various DN syntax types are supported, not just plain DNs. Signed-off-by: Samuel Cabrero (abartlet: Fixed compile error: return makes integer from pointer without a cast) Signed-off-by: Andrew Bartlett Reviewed-by: Andrew Bartlett Reviewed-by: Garming Sam (returned to Samba by revert of dc2d5ccd56ff8c59f3686a652ec3082069914bb4, returning the original commit 2a22ba34cd6f28950246b54c6577c922c61f4fdb) Signed-off-by: Andrew Bartlett Signed-off-by: Adrian Cochrane Reviewed-by: Garming Sam --- lib/ldb-samba/ldb_matching_rules.h | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 lib/ldb-samba/ldb_matching_rules.h (limited to 'lib/ldb-samba/ldb_matching_rules.h') diff --git a/lib/ldb-samba/ldb_matching_rules.h b/lib/ldb-samba/ldb_matching_rules.h new file mode 100644 index 00000000000..e969b3d47cf --- /dev/null +++ b/lib/ldb-samba/ldb_matching_rules.h @@ -0,0 +1,28 @@ +/* + Unix SMB/CIFS implementation. + + ldb database library - Extended match rules + + Copyright (C) 2014 Samuel Cabrero + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see . +*/ + +#ifndef _LDB_MATCHING_RULES_H_ +#define _LDB_MATCHING_RULES_H_ + +/* This rule provides recursive search of a link attribute */ +#define SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL "1.2.840.113556.1.4.1941" + +#endif /* _LDB_MATCHING_RULES_H_ */ -- cgit v1.2.1