RFC 1558 (rfc1558) - Page 2 of 3


A String Representation of LDAP Search Filters



Alternative Format: Original Text Document



RFC 1558             Representation of LDAP Filters        December 1993


     AttributeValueAssertion ::= SEQUENCE
             attributeType   AttributeType,
             attributeValue  AttributeValue
     }

     AttributeType ::= LDAPString

     AttributeValue ::= OCTET STRING

     LDAPString ::= OCTET STRING

   where the LDAPString above is limited to the IA5 character set.  The
   AttributeType is a string representation of the attribute object
   identifier in dotted OID format (e.g., "2.5.4.10"), or the shorter
   string name of the attribute (e.g., "organizationName", or "o").  The
   AttributeValue OCTET STRING has the form defined in [2].  The Filter
   is encoded for transmission over a network using the Basic Encoding
   Rules defined in [3], with simplifications described in [1].

2.  String Search Filter Definition

   The string representation of an LDAP search filter is defined by the
   following BNF.  It uses a prefix format.

      ::= '('  ')'
      ::=  |  |  |  ::= '&'  ::= '|'  ::= '!'  ::=  |  ::=  |  |  ::=  ::=  |  |  |  ::= '='
      ::= '~='
      ::= '>='
      ::= ' ::=  '=*'
      ::=  '='  ::= NULL |  ::= '*'  ::= NULL |  '*'  ::= NULL |  is a string representing an AttributeType, and has the format
   defined in [1].   is a string representing an AttributeValue,
   or part of one, and has the form defined in [2].  If a  must
   contain one of the characters '*' or '(' or ')', these characters



Howes