Programming Guides › Programming Guide for C › Policy Management API › Function Declarations for the Policy Management API › Sm_PolicyApi_LookupDirectoryEntry() › Search Expression Grammar for an LDAP Namespace

Search Expression Grammar for an LDAP Namespace

The search in an LDAP user directory can be based on an attribute-value pair or on an LDAP search expression.

• For an attribute-value pair, the format of pszSearchPattern is:

  <attribute-name>=<value>
  

  For example if <attribute-name> is disabled and <value> is 0, the LDAP search filter is:

  Base:'o=airius.com',

  Filter:

  '(&
        (|(objectclass=organizationalPerson)
        (objectclass=inetOrgPerson)
        (objectclass=organization)
        (objectclass=organizationalUnit)
        (objectclass=groupOfNames)
        (objectclass=groupOfUniqueNames)
        (objectclass=group)
        )
        (disabled=0)
  )'
  

• If the search uses an LDAP search expression, pszSearchPattern will hold the LDAP search expression. For example, if the search expression is 'uid=user1111', the LDAP search filter is:

  Base:'o=airius.com',

  Filter:

  '(&
        (|(objectclass=organizationalPerson)
        (objectclass=inetOrgPerson)
        (objectclass=organization)
        (objectclass=organizationalUnit)
        (objectclass=groupOfNames)
        (objectclass=groupOfUniqueNames)
        (objectclass=group)
        )
        (uid=user1111)
  )'