Red Hat DIRECTORY SERVER 8.0 Command Reference Manual page 180

Chapter 6. Command-Line Utilities
Option
-D
-g
-h
-l
170
Description
The root DSE entry is a special entry that
contains a list of all the suffixes supported by
the local directory. To search this entry, supply a
search base of "", a search scope of base, and
a filter of "objectclass=*". For example:
-b "" -s base "objectclass=*"
Specifies the distinguished name with which to
authenticate to the server. This option is optional
if anonymous access is supported by the server.
If specified, this value must be a DN recognized
by the Directory Server, and it must also have the
authority to search for the entries. For example:
-D "uid=bjensen, dc=example,dc=com"
Specifies that the password policy request
control not be sent with the bind request. By
default, the new LDAP password policy request
control is sent with bind requests.
The ldapsearch tool can parse and display
information from the response control if it is
returned by a server; that is, the tool will print
an appropriate error or warning message when
a server sends the password policy response
control with the appropriate value.
The criticality of the request control is set to
false to ensure that all LDAPv3 servers that
do not understand the control can ignore it. To
suppress sending of the request control with the
bind request, include -g on the command-line.
Specifies the hostname or IP address of the
machine on which the Directory Server is
installed. If a host is not specified, ldapsearch
uses the local host. For example:
-h mozilla
Specifies the maximum number of seconds
to wait for a search request to complete. For
example:
-l 300
Regardless of the value specified here,
ldapsearch will never wait longer than is
allowed by the server's nsslapd-timelimit
attribute, unless the authenticated user is