Red Hat 8.1 Configuration And Command Reference page 178

178
Chapter 6. Command-Line Utilities
T able 6.3. Commonly-Used ldapsearch Options
Option
-b
-D
-g
-h
-l
-p
Description
Specifies the starting point for the search. T he
value specified here must be a distinguished
name that currently exists in the database. T his
option is optional if the LDAP_BASEDN
environment variable has been set to a base DN.
T he value specified in this option should be
provided in double quotation marks. For example:
-b "cn=Barbara Jensen, ou=Product
Development, dc=example,dc=com"
T he root DSE entry is a special entry that
contains a list of all the suffixes supported by the
local directory. T o search this entry, supply a
search base of "", a search scope of base, and
a filter of "objectclass=* ". For example:
-b "" -s base "objectclass=*"
Specifies the distinguished name with which to
authenticate to the server. T his option is optional
if anonymous access is supported by the server.
If specified, this value must be a DN recognized
by the Directory Server, and it must also have the
authority to search for the entries. For example:
-D "uid=bjensen, dc=example,dc=com"
Specifies that the password policy request control
not be sent with the bind request. By default, the
new LDAP password policy request control is
sent with bind requests.
T he ldapsearch tool can parse and display
information from the response control if it is
returned by a server; that is, the tool will print an
appropriate error or warning message when a
server sends the password policy response
control with the appropriate value.
T he criticality of the request control is set to
false to ensure that all LDAPv3 servers that do
not understand the control can ignore it. T o
suppress sending of the request control with the
bind request, include -g on the command-line.
Specifies the hostname or IP address of the
machine on which the Directory Server is
installed. If a host is not specified, ldapsearch
uses the local host. For example:
-h mozilla
Specifies the maximum number of seconds to wait
for a search request to complete. For example:
-l 300
Regardless of the value specified here,
ldapsearch will never wait longer than is
allowed by the server's nsslapd-timelimit
attribute, unless the authenticated user is the
Directory Manager. T he default value for the
nsslapd-timelimit attribute is 3600 seconds.
See Section 2.3.1.106, "nsslapd-timelimit (T ime
Limit)" for more information.
Specifies the T CP port number that the Directory
Server uses. For example:
-p 1049