DS 7.4.2


Compares an assertion value of Directory String syntax to a value whose syntax is the ASN.1 DirectoryString type.

The rule evaluates to TRUE if and only if the assertion value character string matches a keyword in the attribute value, where keyword matches are implementation defined.

In this implementation, a keyword match occurs if the assertion value is contained within the attribute value, and the assertion value is bounded by the start or the end of the attribute value or any of the following characters:

  • A space

  • A period

  • A comma

  • A slash

  • A dollar sign

  • A plus sign

  • A dash

  • An underscore

  • An octothorpe (#)

  • An equal sign




RFC 4517

Assertion syntax



Copyright © 2010-2024 ForgeRock, all rights reserved.