Search Filters

  • Criteria for attributes that must be fulfilled for entry to be returned
  • Base dn = base object entry search is relative to
  • Prefix notation
  • Standards
    • RFC 1960: LDAP String Representation of Search Filters
    • RFC 2254: LDAPv3 Search Filters
  • Operators
    • & = and
    • | = or
    • ! = not
    • ~= = approx equal
    • >= = greater than or equal
    • <= = less than or equal
    • * = any
  • Eg
    • (objectclass=posixAccount)
    • (cn=Mickey M*)
    • (|(uid=fred)(uid=bill))
    • (&(|(uid=jack)(uid=jill))(objectclass=posixAccount))