My Oracle Support Banner

In LDAP Filter File, What Is The Difference Between "|" And "&" Boolean Operators ? (Doc ID 1435071.1)

Last updated on NOVEMBER 06, 2018

Applies to:

Oracle Tuxedo - Version: 10.3.0 and later   [Release: and later ]
Information in this document applies to any platform.

Goal


   When setting up CORBA SSL security,  an LDAP directory is needed.

   Some criteria are defined to filter the requests sent to the LDAP in the following file :
$TUXDIR/udataobj/security/bea_ldap_filter.dat


   A by-default configuration can be noticed using "|" Boolean operator

"BEA_person_lookup"
".*"  " "  "(|(objectClass=strongAuthenticationUser)(mail=%cn))" "cn name"
           "(|(objectClass=strongAuthenticationUser) (mail=%v))" "start of email address"
as referred in the documentation at page http://docs.oracle.com/cd/E13161_01/tuxedo/docs10gr3/security/certs.html#wp1033595


      Question : Why is "|" Boolean operator used instead of "&" one ? When to use "|" or "&" operators ?



Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
  Goal
     
  Solution
          Boolean operators "|" and "&" are LDAP operators and NOT Tuxedo ones
          Choice of configuration 
         (0) By-default configuration uses "|" Boolean operator:
         (1) Boolean operator "&" and "mail" operator :
         (2) Boolean operator "&" and "cn" and "mail" operators with "@" as delimiter :

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.