draft-ietf-asid-string-filter-00.txt   rfc1960.txt 
Network Working Group Tim Howes Network Working Group T. Howes
INTERNET DRAFT University of Michigan Request for Comments: 1960 University of Michigan
19 December, 1995 Obsoletes: 1558 June 1996
Category: Standards Track
A String Representation of LDAP Search Filters A String Representation of LDAP Search Filters
<draft-ietf-asid-string-filter-00.txt>
1. Status of this Memo Status of this Memo
This document is an Internet-Draft. Internet-Drafts are working docu-
ments of the Internet Engineering Task Force (IETF), its areas, and its
working groups. Note that other groups may also distribute working
documents as Internet-Drafts.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet- Drafts as reference material
or to cite them other than as ``work in progress.''
To learn the current status of any Internet-Draft, please check the This document specifies an Internet standards track protocol for the
``1id-abstracts.txt'' listing contained in the Internet- Drafts Shadow Internet community, and requests discussion and suggestions for
Directories on ds.internic.net (US East Coast), nic.nordu.net (Europe), improvements. Please refer to the current edition of the "Internet
ftp.isi.edu (US West Coast), or munnari.oz.au (Pacific Rim). Official Protocol Standards" (STD 1) for the standardization state
and status of this protocol. Distribution of this memo is unlimited.
2. Abstract 1. Abstract
The Lightweight Directory Access Protocol (LDAP) [1] defines a network The Lightweight Directory Access Protocol (LDAP) [1] defines a
representation of a search filter transmitted to an LDAP server. Some network representation of a search filter transmitted to an LDAP
applications may find it useful to have a common way of representing server. Some applications may find it useful to have a common way of
these search filters in a human-readable form. This document defines a representing these search filters in a human-readable form. This
human-readable string format for representing LDAP search filters. document defines a human-readable string format for representing LDAP
search filters.
3. LDAP Search Filter Definition 2. LDAP Search Filter Definition
An LDAP search filter is defined in [1] as follows: An LDAP search filter is defined in [1] as follows:
Filter ::= CHOICE { Filter ::= CHOICE {
and [0] SET OF Filter, and [0] SET OF Filter,
or [1] SET OF Filter, or [1] SET OF Filter,
not [2] Filter, not [2] Filter,
equalityMatch [3] AttributeValueAssertion, equalityMatch [3] AttributeValueAssertion,
substrings [4] SubstringFilter, substrings [4] SubstringFilter,
greaterOrEqual [5] AttributeValueAssertion, greaterOrEqual [5] AttributeValueAssertion,
lessOrEqual [6] AttributeValueAssertion, lessOrEqual [6] AttributeValueAssertion,
present [7] AttributeType, present [7] AttributeType,
approxMatch [8] AttributeValueAssertion approxMatch [8] AttributeValueAssertion
RFC DRAFT December 1995
} }
SubstringFilter ::= SEQUENCE { SubstringFilter ::= SEQUENCE {
type AttributeType, type AttributeType,
SEQUENCE OF CHOICE { SEQUENCE OF CHOICE {
initial [0] LDAPString, initial [0] LDAPString,
any [1] LDAPString, any [1] LDAPString,
final [2] LDAPString final [2] LDAPString
} }
} }
skipping to change at page 2, line 29 skipping to change at page 2, line 15
attributeType AttributeType, attributeType AttributeType,
attributeValue AttributeValue attributeValue AttributeValue
} }
AttributeType ::= LDAPString AttributeType ::= LDAPString
AttributeValue ::= OCTET STRING AttributeValue ::= OCTET STRING
LDAPString ::= OCTET STRING LDAPString ::= OCTET STRING
where the LDAPString above is limited to the IA5 character set. The where the LDAPString above is limited to the IA5 character set. The
AttributeType is a string representation of the attribute type name and AttributeType is a string representation of the attribute type name
is defined in [1]. The AttributeValue OCTET STRING has the form defined and is defined in [1]. The AttributeValue OCTET STRING has the form
in [2]. The Filter is encoded for transmission over a network using the defined in [2]. The Filter is encoded for transmission over a
Basic Encoding Rules defined in [3], with simplifications described in network using the Basic Encoding Rules defined in [3], with
[1]. simplifications described in [1].
4. String Search Filter Definition 3. String Search Filter Definition
The string representation of an LDAP search filter is defined by the The string representation of an LDAP search filter is defined by the
following grammar. It uses a prefix format. following grammar. It uses a prefix format.
<filter> ::= '(' <filtercomp> ')' <filter> ::= '(' <filtercomp> ')'
<filtercomp> ::= <and> | <or> | <not> | <item> <filtercomp> ::= <and> | <or> | <not> | <item>
<and> ::= '&' <filterlist> <and> ::= '&' <filterlist>
<or> ::= '|' <filterlist> <or> ::= '|' <filterlist>
<not> ::= '!' <filter> <not> ::= '!' <filter>
<filterlist> ::= <filter> | <filter> <filterlist> <filterlist> ::= <filter> | <filter> <filterlist>
<item> ::= <simple> | <present> | <substring> <item> ::= <simple> | <present> | <substring>
<simple> ::= <attr> <filtertype> <value> <simple> ::= <attr> <filtertype> <value>
<filtertype> ::= <equal> | <approx> | <greater> | <less> <filtertype> ::= <equal> | <approx> | <greater> | <less>
<equal> ::= '=' <equal> ::= '='
<approx> ::= '~=' <approx> ::= '~='
<greater> ::= '>=' <greater> ::= '>='
<less> ::= '<=' <less> ::= '<='
<present> ::= <attr> '=*' <present> ::= <attr> '=*'
RFC DRAFT December 1995
<substring> ::= <attr> '=' <initial> <any> <final> <substring> ::= <attr> '=' <initial> <any> <final>
<initial> ::= NULL | <value> <initial> ::= NULL | <value>
<any> ::= '*' <starval> <any> ::= '*' <starval>
<starval> ::= NULL | <value> '*' <starval> <starval> ::= NULL | <value> '*' <starval>
<final> ::= NULL | <value> <final> ::= NULL | <value>
<attr> is a string representing an AttributeType, and has the format <attr> is a string representing an AttributeType, and has the format
defined in [1]. <value> is a string representing an AttributeValue, or defined in [1]. <value> is a string representing an AttributeValue,
part of one, and has the form defined in [2]. If a <value> must contain or part of one, and has the form defined in [2]. If a <value> must
one of the characters '*' or '(' or ')', these characters should be contain one of the characters '*' or '(' or ')', these characters
escaped by preceding them with the backslash '\' character. Note that should be escaped by preceding them with the backslash '\' character.
although both the <substring> and <present> productions can produce the
'attr=*' construct, this construct is used only to denote a presence
filter.
5. Examples Note that although both the <substring> and <present> productions can
produce the 'attr=*' construct, this construct is used only to denote
a presence filter.
This section gives a few examples of search filters written using this 4. Examples
notation.
This section gives a few examples of search filters written using
this notation.
(cn=Babs Jensen) (cn=Babs Jensen)
(!(cn=Tim Howes)) (!(cn=Tim Howes))
(&(objectClass=Person)(|(sn=Jensen)(cn=Babs J*))) (&(objectClass=Person)(|(sn=Jensen)(cn=Babs J*)))
(o=univ*of*mich*) (o=univ*of*mich*)
6. Security Considerations 5. Security Considerations
Security considerations are not discussed in this document. Security considerations are not discussed in this memo.
7. Bibliography 6. Bibliography
[1] Lightweight Directory Access Protocol. Wengyik Yeong, Tim Howes, [1] Yeong, W., Howes, T., and S. Kille, "Lightweight
Steve Kille, Request for Comment (RFC) 1777, March 1995 Directory Access Protocol", RFC 1777, March 1995.
[2] The String Representation of Standard Attribute Syntaxes. T. [2] Howes, R., Kille, S., Yeong, W., and C. Robbins, "The String
Howes, S. Kille, W. Yeong, C.J. Robbins; Request for Comment (RFC) Representation of Standard Attribute Syntaxes", RFC 1778,
1778, March 1995 March 1995.
[3] Specification of Basic Encoding Rules for Abstract Syntax Notation [3] Specification of Basic Encoding Rules for Abstract Syntax
One (ASN.1). CCITT Recommendation X.209, 1988. Notation One (ASN.1). CCITT Recommendation X.209, 1988.
8. Author's Address 7. Author's Address
Tim Howes Tim Howes
University of Michigan University of Michigan
ITD Research Systems ITD Research Systems
535 W William St. 535 W William St.
Ann Arbor, MI 48103-4943 Ann Arbor, MI 48103-4943
RFC DRAFT December 1995
USA USA
+1 313 747-4454
tim@umich.edu Phone: +1 313 747-4454
EMail: tim@umich.edu
 End of changes. 25 change blocks. 
67 lines changed or deleted 51 lines changed or added

This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/