authentication password syntax
authorization identity control
Common Development and Distribution License
deprecated password storage scheme
Directory Services Markup Language
entry change notification control
extensible match search filter
greater than or equal to search filter
less than or equal to search filter
Lightweight Directory Access Protocol
notice of disconnection unsolicited notification
Password Modify extended operation
Simple Authentication and Security Layer
virtual attributes only control
The LDAP search scope indicates the set of entries at or below the search base DN that may be considered potential matches for a search operation.
There are four defined search scope values:
This specifies that the search operation should only be performed against the entry specified as the search base DN. No entries below it will be considered.
A sample DIT illustrating the baseObject scope with a search base DN of dc=example,dc=com is given below:
This specifies that the search operation should only be performed against entries that are immediate subordinates of the entry specified as the search base DN. The base entry itself is not included, nor are any entries below the immediate subordinates of the search base entry.
A sample DIT illustrating the singleLevel scope with a search base DN of dc=example,dc=com is given below:
This specifies that the search operation should be performed against the entry specified as the search base and all of its subordinates to any depth.
A sample DIT illustrating the wholeSubtree scope with a search base DN of dc=example,dc=com is given below:
This specifies that the search operation should be performed against all subordinate entries below the search base to any depth, but the search base entry itself should not be included.
A sample DIT illustrating the subordinateSubtree scope with a search base DN of dc=example,dc=com is given below: