Netscape NETSCAPE DIRECTORY SERVER 6.02, Administrator'S Manual

Page: 507 / 568

Using ldapsearch
Appendix B Finding Directory Entries 507
For detailed information on all
ldapsearch
utility options, refer to the Netscape
Directory Server Configuration, Command, and File Reference.
ldapsearch Examples
In the next set of examples, suppose the following are true:
• You want to perform a search of all entries in the directory.
-s
Specifies the scope of the search. The scope can be one of the
following:
•
base
—Search only the entry specified in the
-b
option or defined
by the
LDAP_BASEDN
environment variable.
•
one
—Search only the immediate children of the entry specified in
the
-b
option. Only the children are searched; the actual entry
specified in the
-b
option is not searched.
•
sub
—Search the entry specified in the
-b
option and all of its
descendants. That is, perform a subtree search starting at the point
identified in the
-b
option. This is the default.
-w
Specifies the password associated with the distinguished name that is
specified in the
-D
option. If you do not specify this option,
anonymous access is used. For example,
-w diner892
.
-x
Specifies that the search results are sorted on the server rather than on
the client. This is useful if you want to sort according to a matching
rule, as with an international search. In general, it is faster to sort on
the server rather than on the client.
-z
Specifies the maximum number of entries to return in response to a
search request. For example,
-z 1000
.
Normally, regardless of the value specified here,
ldapsearch
never
returns more entries than the number allowed by the server’s
nsslapd-sizelimit
attribute. However, you can override this
limitation by binding as the root DN when using this command-line
argument. When you bind as the root DN, this option defaults to zero
(0). The default value for the
nsslapd-sizelimit
attribute is 2,000
entries.