To Create Search Data Hiding Rules

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. Create one or more search data hiding rules for a request filtering policy.

   $ dpconf create-search-data-hiding-rule -h host -p port policy-name rule-name \ [rule-name ...]

2. View the properties of a search data hiding rule.

   $ dpconf get-search-data-hiding-rule-prop policy-name rule-name

   The default properties of a search data hiding rule are as follows:

   attrs : none rule-action : hide-entry target-attr-value-assertions : none target-dn-regular-expressions : none target-dns : none

3. Configure a search data hiding rule by setting one or more of the properties listed in Step 2.

   $ dpconf set-search-data-hiding-rule-prop -h host -p port policy-name rule-name \ property:value [property:value ...]

   One of the following rule actions can be used:

   hide-entry

   The target entry is not returned.

   hide-attributes

   The target entry is returned but the specified attributes are filtered out.

   show-attributes

   The target entry is returned but the unspecified attributes are filtered out.

   The rule can be applied to the following entries:

   target-dns

   Entries with the specified DN

   target-dn-regular-expressions

   Entries with the specified DN pattern

   target-attr-value-assertions

   Entries with a specified attribute name and attribute value pair (attrName#attrValue)

   The following configuration defines a search data hiding rule that hides entries of type inetorgperson.

   $ dpconf set-search-data-hiding-rule-prop -h host1 -p port my-policy my-rule \ target-attr-value-assertions:objectclass#inetorgperson