Searching The Schema Entry; Using Ldap_Basedn; Displaying Subsets Of Attributes - Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual

Searching the Schema Entry

Directory Server stores all directory server schema in the special
This entry contains information on every object class and attribute defined for your
Directory Server.
You can examine the contents of this entry as follows:
ldapsearch -h mozilla -b "cn=schema" -s base "objectclass=*"

Using LDAP_BASEDN

To make searching easier, you can set your search base using the
environment variable. Doing this allows you to skip specifying the search base
with the option. For information on how to set environment variables, see the
-b
documentation for your operating system.
Typically, you set
LDAP_BASEDN
directory suffix is equal to the root, or topmost, entry in your directory, this causes
all searches to begin from your directory's root entry.
For example, suppose you have set
search for
cn=babs jensen
ldapsearch -h mozilla "cn=babs jensen"
In this example, the default scope of
used to specify the scope.

Displaying Subsets of Attributes

The command returns all search results in LDIF format. By default,
ldapsearch
returns the entry's distinguished name and all of the attributes that
ldapsearch
you are allowed to read. You can set up the directory access control such that you
are allowed to read only a subset of the attributes on any given directory entry.
Only operational attributes are not returned. If you want operational attributes
returned as a result of a search operation, you must explicitly specify them in the
search command.
Suppose you do not want to see all of the attributes returned in the search results.
You can limit the returned attributes to just a few specific attributes by specifying
the ones you want on the command-line immediately after the search filter. For
example, to show the
following command-line call:
ldapsearch -h mozilla "objectclass=*" sn cn
This example assumes you set your search base with
to your directory's suffix value. Since your
LDAP_BASEDN
in your directory, use the following command-line call:
is used because the
sub
and attributes for every entry in the directory, use the
cn sn
cn=schema
LDAP_BASEDN
to
dc=example,dc=com
option was not
-s
.
LDAP_BASEDN
Appendix B Finding Directory Entries
Using ldapsearch
entry.
. Then to
593