Using Ldap_Basedn; Displaying Subsets Of Attributes; Specifying Search Filters Using A File - Netscape DIRECTORY SERVER 6.02 - ADMINISTRATOR Administrator's Manual

Using LDAP_BASEDN

To make searching easier, you can set your search base using the
environment variable. Doing this allows you to skip specifying the search base
with the option (for information on how to set environment variables, see the
-b
documentation for your operating system).
Typically, you set
LDAP_BASEDN
directory suffix is equal to the root, or topmost, entry in your directory, this causes
all searches to begin from your directory's root entry.
For example, suppose you have set
search for
cn=babs jensen
ldapsearch -h mozilla "cn=babs jensen"
In this example, the default scope of
used to specify the scope.

Displaying Subsets of Attributes

The command returns all search results in LDIF format. By default,
ldapsearch
returns the entry's distinguished name and all of the attributes that
ldapsearch
you are allowed to read (you can set up the directory access control such that you
are allowed to read only a subset of the attributes on any given directory entry).
Only operational attributes are not returned. If you want operational attributes
returned as a result of a search operation, you must explicitly specify them in the
search command.
Suppose you do not want to see all of the attributes returned in the search results.
You can limit the returned attributes to just a few specific attributes by specifying
the ones you want on the command line immediately after the search filter. For
example, to show the
following command-line call:
ldapsearch -h mozilla "objectclass=*" sn cn
This example assumes you set your search base with

Specifying Search Filters Using a File

You can enter search filters into a file instead of entering them on the command
line. When you do this, specify each search filter on a separate line in the file. The
command runs each search in the order in which it appears in the file.
ldapsearch
For example, if the file contains:
sn=Francis
givenname=Richard
to your directory's suffix value. Since your
LDAP_BASEDN
in your directory use the following command-line call:
is used because the
sub
and attributes for every entry in the directory, use the
cn sn
LDAP_BASEDN
to
dc=example,dc=com
option was not
-s
.
LDAP_BASEDN
Appendix B Finding Directory Entries
Using ldapsearch
. Then to
509