access control instruction (ACI)
authentication password syntax
authorization identity control
Common Development and Distribution License
deprecated password storage scheme
Directory Services Markup Language
entry change notification control
extensible match search filter
greater than or equal to search filter
less than or equal to search filter
Lightweight Directory Access Protocol
notice of disconnection unsolicited notification
Password Modify extended operation
Simple Authentication and Security Layer
virtual attributes only control
A matching rule is a schema element that defines how the server should interact with values of an attribute. There are three standard types of matching rules:
Equality matching rules are used to determine whether one attribute value is equal to another. This determination is generally made based on the normalized value, and ignores insignificant differences (for example, differences in capitalization or extra spaces).
Ordering matching rules are used to determine the relative order between two values in a sorted list. This is used when performing server-side sort control, but it is also used for greater than or equal to search filter and less than or equal to search filter filter components.
Substring matching rules are used to determine whether a value contains a given substring search filter.
In addition to these standard matching rules, the directory server defines a fourth type, approximate matching rules, which are used to determine whether one value is approximately equal to another. The definition of “approximately equal to” can vary, but one common use is “sounds like”.
Common examples of matching rules include:
An equality matching rule that determines whether two Boolean values are equal to each other.
An equality matching rule that determines whether two string values are equal to each other, without ignoring differences in capitalization.
An ordering matching rule that is used to determine the relative order between two string values, without ignoring differences in capitalization.
A substring matching rule that is used to determine whether a string value contains a given substring, without ignoring differences in capitalization.
An equality matching rule that determines whether two string values are equal to each other, ignoring differences in capitalization.
An ordering matching rule that is used to determine the relative order between two string values, ignoring differences in capitalization.
A substring matching rule that is used to determine whether a string value contains a given substring, ignoring differences in capitalization.
An equality matching rule that determines whether two distinguished name are equal to each other, ignoring extra spaces around commas separating RDN components and equal signs separating RDN names from values. The individual RDN values will be compared based on the matching rules associated with the corresponding RDN attributes.
An equality matching rule that determines whether two generalized time values are equal to each other.
An ordering matching rule that is used to determine the relative order between two generalized time values.
An equality matching rule that determines whether two integer values are equal to each other.
An ordering matching rule that is used to determine the relative order between two integer values.
An equality matching rule that determines whether two values are exactly equal to each other using a byte-for-byte comparison.
In most cases, the directory server will use matching rules in a completely “behind the scenes” manner without the client needing to know about it. Whenever the client references a given attribute type, then the server will automatically know to use the appropriate matching rules for that attribute. However, it is also possible for the client to request that the server use a specific matching rule when performing an operation through the use of an extensible match filter.
The set of matching rules defined in the server may be determined by retrieving the matchingRules attribute of the subschema subentry. For more information about matching rules, see Understanding Matching Rules in Sun OpenDS Standard Edition 2.2 Architectural Reference.