Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 376 / 634

376 Novell eDirectory 8.8 Administration Guide
n
ov
do
cx (e
n)
11
Ju
ly 20
08
These filter attributes (referralIncludeFilter and referralExcludeFilter) are multi-valued. You can
choose as many matching filters as you need.
Example Scenarios
Š
To make an LDAP server return only referrals with the IP address 1.2.X.Y where X = {0 to
255} and Y = {0 to 255} and exclude all others, enter the following:
referralIncludeFilter = { 1.2 }
Š
To make an LDAP server return referral, that exclude all the referrals that match IP address
164.99.X.Y, where X is not equal to 100 and match 164.99.100.Y, enter the following:
referralIncludeFilter = { 164.99.100., "*"}
referralExcludeFilter = { 164.99. }
Here, even though the IP address 164.99.100.Y matches referralExcludeFilter, since these IP
addresses have more matched fields, these referrals will be returned to the LDAP clients.
NOTE: While specifying a partial IP address, the trailing “.” can be omitted.
Š To make an LDAP server return only clear text port referrals and drop SSL port referrals, enter
the following:
referralIncludeFilter = { "ldap://" }
OR
referralExcludeFilter = { "ldaps://" }
Š
To make an LDAP server return from a set of IP addresses and drop all other IP address
referrals, enter the following:
referralIncludeFilter = { 1.2.3.4, 2.3.4.5:389, 3.4.5.6:636, ldaps://4.5.6.7 }
referralExcludeFilter = { "*" }
NOTE: Here, referralExcludeFilter is not required. Any populated referralIncludeFilter
implies to exclude all others.
Š There are two filters, as follows:
referralIncludeFilter = { 1.2.3.4 }
referralExcludeFilter = { 2.3.4.5 }
A referral with IP address 3.4.5.6 will be excluded as it does not match the referralInclude
filter, even though it does not match the referralExcludeFilter as well.
Invalid Filters —The following filters are not supported.
".2.3.4" or "*.2.3.4" will not match the IP addresses "X.2.3.4"
ldap:// or ldap://* # matches all the clear text port LDAP referrals
ldaps:// or ldap://* # matches all the ssl port LDAP referrals
* # matches all
ldaps://5.6.7.8:636 # matches for SSL port 636 on IP addresses 5.6.7.8
Examples Description