Red Hat DIRECTORY SERVER 8.0, Руководство администратора

Страница: 502 / 552

Appendix B. Finding Directory Entries
484
ldapsearch -h mozilla -s base -b "l=Bolivia\,S.A.,dc=example,dc=com" "objectclass=*"
B.2.4.9. Using Client Authentication When Searching
This example shows user
bjensen
searching the directory using client authentication:
ldapsearch -h mozilla -p 636 -b "dc=example,dc=com" -N "bjensenscertname"
-Z -W certdbpassword -P /home/bjensen/certdb/cert8.db "givenname=Richard"
B.3. LDAP Search Filters
Search filters select the entries to be returned for a search operation. They are most commonly used
with the
ldapsearch
command-line utility. When using
ldapsearch
, there can be multiple search
filters in a file, with each filter on a separate line in the file, or a search filter can be specified directly on
the command-line.
For example, the following filter specifies a search for the common name Babs Jensen:
cn=babs jensen
This search filter returns all entries that contain the common name Babs Jensen. Searches for
common name values are not case sensitive.
When the common name attribute has values associated with a language tag, all of the values are
returned. Thus, the following two attribute values both match this filter:
cn: babs jensen
cn;lang-fr: babs jensen
For a list of all the supported language tags, see
Table D.1, “Supported Locales”
.
B.3.1. Search Filter Syntax
The basic syntax of a search filter is:
attribute operator value
For example:
buildingname>=alpha
In this example,
buildingname
is the attribute,
>=
is the operator, and
alpha
is the value. Filters
can also be defined that use different attributes combined together with Boolean operators.
Search filters are described in detail in the following sections:
•
Section B.3.1.1, “Using Attributes in Search Filters”
•
Section B.3.1.2, “Using Operators in Search Filters”
•
Section B.3.1.3, “Using Compound Search Filters”
•
Section B.3.1.4, “Search Filter Examples”