Red Hat DIRECTORY SERVER 7.1 Configuration page 237

Option Description
Specifies the starting point for the search. The value specified here must be a
-b
distinguished name that currently exists in the database. This option is
optional if the LDAP_BASEDN environment variable has been set to a base DN.
The value specified in this option should be provided in double quotation
marks. For example:
-b "cn=Barbara Jensen, ou=Product Development,
dc=example,dc=com"
The root DSE entry is a special entry that contains a list of all the suffixes
supported by the local directory. To search this entry, you must supply a
search base of "", a search scope of base and a filter of "objectclass=*".
For example:
-b "" -s base "objectclass=*"
Specifies the distinguished name with which to authenticate to the server. This
-D
option is optional if anonymous access is supported by your server. If
specified, this value must be a DN recognized by the Directory Server, and it
must also have the authority to search for the entries. For example:
-D "uid=bjensen, dc=example,dc=com"
Specifies that the password policy request control not be sent with the bind
-g
request. For details, see Red Hat Directory Server Deployment Guide.
By default, the new LDAP password policy request control is sent with bind
requests. The ldapsearch tool can parse and display information from the
response control if it is returned by a server; that is, the tool will print an
appropriate error or warning message when a server sends the password
policy response control with the appropriate value.
The criticality of the request control is set to false to ensure that all LDAPv3
servers that do not understand the control can ignore it.
To suppress sending of the request control with the bind request, include -g
on the command-line.
Specifies the hostname or IP address of the machine on which the Directory
-h
Server is installed. If you do not specify a host, ldapsearch uses the local
host. For example, -h mozilla.
Specifies the maximum number of seconds to wait for a search request to
-l
complete. For example, -l 300. Regardless of the value specified here,
ldapsearch will never wait longer than is allowed by the server's
nsslapd-timelimit attribute. The default value for the
nsslapd-timelimit attribute is 3600 seconds. See "nsslapd-timelimit
(Time Limit)," on page 83, for more information.
Chapter 7 Command-Line Utilities
ldapsearch
237