Rule to apply ldap group filter to allow access in OAM Policy Manager

Question

This may be pretty basic, but I'm trying to implement a rule in Policy Manager to allow access to a resource based on LDAP group membership. I can't figure out how to construct the ldap query. I'm using OID as the directory server.
Does anybody know how to create an ldap query that will apply a group filter to authenticated?
the format would be something like
ldap:///dc=oracle,dc=com??sub?(......)
thanks for any help!

Answer 1

Mark,
Do you by any chance know what we can include in our DBMS_LDAP statement to populate the OID for a new user creation to populate the obpasswordcreationdate as a part of the user creation.
Here is what are running but since we moved to OBLIX, we don't know how to populate a new user?
Here is part of our code using MOD_ADD.
emp_vals(7) := null;
DBMS_LDAP.populate_mod_array(emp_array,DBMS_LDAP.MOD_ADD,'obpasswordcreationdate',emp_vals);
emp_vals(1) := 'top';
emp_vals(2) := 'person';
emp_vals(3) := 'organizationalPerson';
emp_vals(4) := 'inetOrgPerson';
emp_vals(5) := 'orcluser';
emp_vals(6) := 'orcluserv2';
emp_vals(7) := 'oblixPersonPwdPolicy';
After it runs, it send me an error no data found.
Thx so much in advance. Not getting any answers.
KA