Directory Proxy Server Documentation Index
Configuration Reference Home

Suppress Entry Proxy Transformation

The Suppress Entry Proxy Transformation may be used to prevent search result entries matching a specified filter from being returned to the client. The suppression will be performed by altering the filter of search requests to include a component that will not match the suppression filter defined in this Suppress Entry Proxy Transformation. For example, if the Directory Proxy Server receives a search request with a filter of "(uid=john.doe)" and this Suppress Entry Proxy Transformation is configured with a suppression filter of "(objectClass=secretEntry)", then the search request forwarded on to the backend server will have a filter of "(&(uid=john.doe)(!(objectClass=secretEntry)))".

Parent Component
Properties
dsconfig Usage

Parent Component

The Suppress Entry Proxy Transformation component inherits from the Proxy Transformation

Properties

The properties supported by this managed object are as follows:


Basic Properties: Advanced Properties:
↓ description  None
↓ enabled
↓ request-criteria
↓ filter

Basic Properties

description

Description
A description for this Proxy Transformation
Default Value
None
Allowed Values
A string
Multi-Valued
No
Required
No
Admin Action Required
None. Modification requires no further action

enabled

Description
Indicates whether this proxy transformation is enabled for use in the server.
Default Value
None
Allowed Values
true
false
Multi-Valued
No
Required
Yes
Admin Action Required
None. Modification requires no further action

request-criteria

Description
Criteria indicating the set of operations for which the transformation will be invoked.
Default Value
This Proxy Transformation will be invoked for all operations.
Allowed Values
The DN of any Request Criteria.
Multi-Valued
No
Required
No
Admin Action Required
None. Modification requires no further action

filter

Description
Specifies a filter that should be used to determine which search result entries. Any entry matching this filter will not be forwarded to the client.
Default Value
None
Allowed Values
A valid LDAP search filter
Multi-Valued
No
Required
Yes
Admin Action Required
None. Modification requires no further action


dsconfig Usage

To list the configured Proxy Transformations:

dsconfig list-proxy-transformations
     [--property {propertyName}] ...

To view the configuration for an existing Proxy Transformation:

dsconfig get-proxy-transformation-prop
     --transformation-name {name}
     [--tab-delimited]
     [--script-friendly]
     [--property {propertyName}] ...

To update the configuration for an existing Proxy Transformation:

dsconfig set-proxy-transformation-prop
     --transformation-name {name}
     (--set|--add|--remove) {propertyName}:{propertyValue}
     [(--set|--add|--remove) {propertyName}:{propertyValue}] ...

To create a new Suppress Entry Proxy Transformation:

dsconfig create-proxy-transformation
     --transformation-name {name}
     --type suppress-entry
     --set enabled:{propertyValue}
     --set filter:{propertyValue}
     [--set {propertyName}:{propertyValue}] ...

To delete an existing Proxy Transformation:

dsconfig delete-proxy-transformation
     --transformation-name {name}