Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual page 608

Components of an LDAP URL
Table C-1
Component
base_dn
attributes
scope
filter
The attributes, scope, and filter components are identified by their positions in the
URL. If you do not want to specify any attributes, you still need to include the
question marks delimiting that field.
For example, to specify a subtree search starting from
returns all attributes for entries matching
followingLDAP URL:
ldap://ldap.example.com/dc=example,dc=com??sub?(sn=Jensen)
The two consecutive question marks
specified. Since no specific attributes are identified in the URL, all attributes are
returned in the search.
608 Red Hat Directory Server Administrator's Guide • May 2005
LDAP URL Components (Continued)
Description
Distinguished name (DN) of an entry in the directory. This DN
identifies the entry that is the starting point of the search. If no base
DN is specified, the search starts at the root of the directory tree.
The attributes to be returned. To specify more than one attribute,
use commas to separate the attributes (for example,
"cn,mail,telephoneNumber"). If no attributes are specified in
the URL, all attributes are returned.
The scope of the search, which can be one of these values:
• base retrieves information only about the distinguished name
(base_dn) specified in the URL.
• one retrieves information about entries one level below the
distinguished name (base_dn) specified in the URL. The base
entry is not included in this scope.
• sub retrieves information about entries at all levels below the
distinguished name (base_dn) specified in the URL. The base
entry is included in this scope.
If no scope is specified, the server performs a base search.
Search filter to apply to entries within the specified scope of the
search. If no filter is specified, the server uses the filter
(objectClass=*).
"dc=example,dc=com"
, use the
"(sn=Jensen)"
indicate that no attributes have been
??
that