Netscape NETSCAPE DIRECTORY SERVER 6.1 - ADMINISTRATOR, Administrator'S Manual

Page: 169 / 578

Using Roles
Chapter 5 Advanced Entry Management 169
Creating a Filtered Role
You assign entries to a filtered role depending upon a particular attribute
contained by each entry. You do this by specifying an LDAP filter. Entries that
match the filter are said to possess the role.
To create and add members to a filtered role:
1.
Follow steps 1-5 of “Creating a Managed Role,” on page 168.
2.
Click Members in the left pane.
A search dialog box appears briefly.
3.
In the right pane, select Filtered Role.
4.
Enter an LDAP filter in the text field, or click Construct to be guided through
the construction of an LDAP filter.
5.
If you click Construct, the standard LDAP URL construction dialog appears.
Disregard the LDAP Server Host, Port, Base DN, and Search (as you cannot
specify a search scope for filtered role definitions) fields.
a.
Select the types of entries you want to filter from the “For” drop-down list.
You can choose between users, groups, or both.
b.
Select an attribute from the “Where” drop-down list. The two fields
following it allow you to refine your search by selecting one of the
qualifiers from the drop-down list (such as contains, does not contain, is, is
not) and enter an attribute value in the text box. To add additional filters,
click More. To remove unnecessary filters, click Fewer.
c.
Click OK to save your filter.
6.
Click Test to try your filter.
A Filter Test Result dialog box displays the entries matching your filter.
7.
Click OK.
The new role appears in the right pane.
Creating a Nested Role
Nested roles allow you to create roles that contain other roles. Before you create a
nested role, another role must exist. When you create a nested role, the console
displays a list of the roles available for nesting. The roles nested within the nested
role are specified using the
nsRoleDN
attribute.