Browse Prior Art Database

Returning Matched Values with the Lightweight Directory Access Protocol version 3 (LDAPv3) (RFC3876)

IP.com Disclosure Number: IPCOM000031092D
Original Publication Date: 2004-Sep-01
Included in the Prior Art Database: 2004-Sep-10
Document File: 13 page(s) / 24K

Publishing Venue

Internet Society Requests For Comment (RFCs)

Related People

Returning Matched Values with the Lightweight Directory Access Protocol version 3 (LDAPv3): AUTHOR

Abstract

This document describes a control for the Lightweight Directory Access Protocol version 3 that is used to return a subset of attribute values from an entry. Specifically, only those values that match a "values return" filter. Without support for this control, a client must retrieve all of an attribute's values and search for specific values locally.

This text was extracted from an ASCII text file.
This is the abbreviated version, containing approximately 11% of the total text.

Network Working Group                                        D. Chadwick

Request for Comments: 3876                         University of Salford

Category: Standards Track                                      S. Mullan

                                                        Sun Microsystems

                                                          September 2004

                   Returning Matched Values with the

        Lightweight Directory Access Protocol version 3 (LDAPv3)

Status of this Memo

   This document specifies an Internet standards track protocol for the

   Internet community, and requests discussion and suggestions for

   improvements.  Please refer to the current edition of the "Internet

   Official Protocol Standards" (STD 1) for the standardization state

   and status of this protocol.  Distribution of this memo is unlimited.

Copyright Notice

   Copyright (C) The Internet Society (2004).

Abstract

   This document describes a control for the Lightweight Directory

   Access Protocol version 3 that is used to return a subset of

   attribute values from an entry.  Specifically, only those values that

   match a "values return" filter.  Without support for this control, a

   client must retrieve all of an attribute's values and search for

   specific values locally.

1.  Introduction

   When reading an attribute from an entry using the Lightweight

   Directory Access Protocol version 3 (LDAPv3) [2], it is normally only

   possible to read either the attribute type, or the attribute type and

   all its values.  It is not possible to selectively read just a few of

   the attribute values.  If an attribute holds many values, for

   example, the userCertificate attribute, or the subschema publishing

   operational attributes objectClasses and attributeTypes [3], then it

   may be desirable for the user to be able to selectively retrieve a

   subset of the values, specifically, those attribute values that match

   some user defined selection criteria.  Without the control specified

   in this document, a client must read all of the attribute's values

   and filter out the unwanted values, necessitating the client to

   implement the matching rules.  It also requires the client to

Chadwick & Mullan           Standards Track                     [Page 1]

RFC 3876          Returning Matched Values with LDAPv3    September 2004

   potentially read and process many irrelevant values, which can be

   inefficient if the values are large or complex, or there are many

   values stored per attribute.

   This document specifies an LDAPv3 control to enable a user to return

   only those values that matched...