From: Graham B. <gb...@po...> - 2002-10-24 12:55:19
|
On Tue, Oct 22, 2002 at 02:20:35PM -0400, ti...@uc... wrote: > No, the dn of the user is not available. The dn in the cert is not the > dn of user in the directory. In this case, I HAVE to use the cert in > the filter, it is the only thing guaranteed to be unique that I have > access to at this point. > > Since the userceritificate entry is indexed in the directory, a search > works just fine, as long as the 5 characters ('*','(',')','\', and 'nul') > mentioned in RFC 2254 are converted beforehand, as detailed in > the RFC. > > I was just wondering if there was a method in Net::LDAP::Filter to > do this, I take it the answer is no. (Note, remember to convert the > '\' first!) There is no method to do the escaping, but one might be useful to add. It also used to be possible to build a filter without going via the string form, but that got dropped when we moved from Convert::BER to Convert::ASN1. As nobody screamed I assumed nobody was using it. Graham. |