The standard matched values request control can be included in search requests to indicate that the server should only return values for a specified attribute that match a given filter, instead of returning all values for that attribute. The control has an OID of 1.2.826.0.1.3344810.2.3, and it takes a value. The following fields may be present in the value-json representation of the value:

• filters: A mandatory, non-empty array field whose values are the string representations of the matched values filters to use. A matched values filter is very similar to a regular LDAP filter, except that the AND, OR, and NOT filter types cannot be used, and the extensible match filter type cannot use the dnAttributes element.

The following sample shows the JSON encoding for the control:

{ 
    "oid":"1.2.826.0.1.3344810.2.3",
    "control-name":"Matched Values Request Control",
    "criticality":false,
    "value-json": { 
        "filters": [ 
            "(mail=*@example.com)" 
        ] 
    } 
}