Sun Java System Directory Server Enterprise Edition 6.3 Migration Guide

Mapping Attributes Restricting Search Responses

In Directory Proxy Server 5, these attributes describe restrictions that are applied to search results being returned by the server, before they are forwarded to the client. In Directory Proxy Server 6, this functionality is provided by setting the properties of a resource limits policy and by configuring search data hiding rules.

For information about configuring a resource limits policy, see Creating and Configuring a Resource Limits Policy in Sun Java System Directory Server Enterprise Edition 6.3 Administration Guide. For information about creating search data hiding rules, see To Create Search Data Hiding Rules in Sun Java System Directory Server Enterprise Edition 6.3 Administration Guide. For a list of properties associated with a search data hiding rule, run the following command:


$ dpconf help-properties | grep search-data-hiding-rule

In iPlanet Directory Access Router 5.0 (IDAR) these configuration attributes are stored under ids-proxy-con-Name=group-name,ou=groups,ou=pd2,ou=iDAR,o=services. In Directory Proxy Server 5.2, these configuration attributes are stored under ou=groups,cn=user-defined-name,ou=dar-config,o=NetscapeRoot.

The following table maps the Directory Proxy Server 5 search response restriction attributes to the corresponding Directory Proxy Server 6.3 properties.

Table 6–11 Mapping of Directory Proxy Server 5 Search Response Restriction Attributes to Directory Proxy Server 6.3 Properties

Directory Proxy Server 5 Attributes 

Directory Proxy Server 6.3 Properties 

ids-proxy-con-max-result-size

search-size-limit property of the resource limits policy

ids-proxy-con-forbidden-return

To hide a subset of attributes: 

rule-action:hide-attributes

attributes:attribute-name

To hide an entire entry: 

rule-action:hide-entry

ids-proxy-con-permitted-return

rule-action:show-attributes

attributes:attribute-name

ids-proxy-con-search-reference

No direct equivalent. Search continuation references are governed by the referral-policy property of the resource limits policy