ldapsearch
236 Red Hat Directory Server Configuration, Command, and File Reference • May 2005
• optional_list_of_attributes are space-separated attributes that reduce the scope
of the attributes returned in the search results. This list of attributes must
appear after the search filter. For a usage example, see the Red Hat Directory
Server Administrator’s Guide. If you do not specify a list of attributes, the search
returns values for all attributes permitted by the access control set in the
directory with the exception of operational attributes.
If you want operational attributes returned as a result of a search operation, you
must explicitly specify them in the search command. To retrieve regular attributes
along with explicitly specified operational attributes, specify “*” in addition to the
operational attributes.
ldapsearch
ldapsearch
is a configurable utility that enables you to locate and retrieve
directory entries via LDAP. This utility opens a connection to the specified server
using the specified distinguished name and password and locates entries based
on a specified search filter. Search scopes can include a single entry, an entry’s
immediate subentries, or an entire tree or subtree. Search results are returned in
LDIF format.
ldapsearch Options
The following three sections list the options which can be specified with
ldapsearch
. The first section lists those options most commonly used, the second
section lists SSL options, and the third lists less common options.
Commonly Used ldapsearch Options
The following lists the most commonly used
ldapsearch
command-line options.
If you specify a value that contains a space [ ], the value should be surrounded by
double quotation marks; for example,
-b "ou=groups, dc=example,dc=com"
.