To be able to describe relations between entries, we have created a simple langage. You can use functions, get attribute values, use either the DN or the RDN of either the author or the target, and a litteral string. When severeals choices are available, take successively each of them.
List of available functions :
All these functions accept two operands. The functions are used in the following way :
or
where function can be replaced be any available function, and a and b are expressions.
List of available variables :
All these variables can be used with the following syntax :
and finally you can get the value(s) of an attribute :
where attribute can be any of the available attributes on the destination LDAP server
So just give a look at the following examples :
1)
Check if the author and the target are the same person.
2)
Check if the author and the target are in the same subtree "two level up".
This is an mandatory mono-value attribute.