LDAP SRCH change

Well, for instance:

 

 

Some of the client certificates we will need to deal with have multiple pieces of data concatenated into the subject field (e.g. email address and a unique ID number). Using iRULES, we can grab the subject and parse out the different values, but we then need a way to query the LDAP tree to check for matches of each value. So we'd like to send a query to match the email address, and then one to match the unique ID number, which could be stored in LDAP fields other than the standards.

 

 

Also, we will have an LDAP field that indicates whether or not the user's account is enabled or disabled - this will be determined by their presence or non-presence on a Certificate Revocation List, so we would like to be able to query LDAP to see if a certain field is set to Y or N.