|
|
|
|
In the case where a broad filter is used for enumeration, the <EnumTest> element is used as a second filter by the application to narrow the search results to valid email addresses. Each <EnumTest> element has <Attribute> and <Test> sub-elements.
sub-element: <Attribute>
The <Attribute> sub-element names an attribute to check.
sub-element: <Test>
The <Test> sub-element has an operator= attribute that must be one of the 12 operators listed in the table below:
> |
!= |
ge |
< |
== |
le |
>= |
gt |
eq |
<= |
lt |
ne |
The given operator is used to test the value of the named attribute against the literal value in the <Test> sub-element.
Example:
ActiveDirectory LDAP verifiers have the following default <EnumTest> element:
<EnumTest>
<Attribute>msExchUserAccountControl</Attribute>
<Test operator="!=">2</Test>
</EnumTest>
Each record returned by the <EnumFilter> search is checked to see if it contains an msExchUserAccountControl attribute with a value of 2. If so, the record is ignored.