EntrySelection control for LDAP modify and delete operations on multiple entries

Document Type Expired Internet-Draft (individual)
Author S Haripriya 
Last updated 2000-08-28
Stream (None)
Intended RFC status (None)
Expired & archived
pdf htmlized (tools) htmlized bibtex
Stream Stream state (No stream defined)
Consensus Boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


This document defines an LDAPv3 control that can select multiple entries in a subtree of a container entry for modification or deletion. This control extends the scope of the LDAPv3 modify and delete operations as defined in [RFC 2251]. This control is useful for modifying or deleting multiple entries on the basis of a single selection criterion. This may be useful for maintenance of an LDAP directory having a large number of objects. Example of Usage - This control can be used by client applications who have the need to modify or delete a large number of entries in an LDAP directory based on a selection criterion. One example of such a usage is when two departments in an organization merge. In this case the 'department' name or number given to a number of employees need to change, and all the employees in a given department are to be assigned the new 'department'. Here the EntrySelection control can be used to select the entries to be modified based on the 'department' value, and the modify operation can change the 'department' value for all the selected entries to the given value.


S Haripriya (sharipriya@novell.com)

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)