Searching the LDAP Directory
You can search for an entry or multiple entries of the LDAP directory. The LDAP BC supports the following search attributes:
-
Use a search filter to specify the context or the first entry for the search, the scope of the search, or any other search criteria and the boundaries to which the search is limited.
-
Use page control to specify a collection of set controls.
-
Use sort to request for the search values to be sorted as per the specified attributes. Set the Sort Attributes field with a pipe (|) separated character string consisting of attributes to use sort control.
For example, set SortAttributes with the string cn|mail to sort entries first by cn and second by mail.
You can search for an attribute among many LDAP servers by using the search referral attribute to set up an LDAP referral to another LDAP server. This means after the search fails to locate the search string on one server, it automatically searches over the referred server. Use the RCF command line utility to generate the credential file that contains the appropriate referral credentials. Search referral supports the following attributes:
-
Ignore – Ignores the referral server.
-
Follow – Connects to the referred system and continues the search operation.
-
Throw – Generates a referral exception, which the client can catch and initiate any action.
You can use any of the following LDAP search methods:
OBJECT_SCOPE Search Method
The OBJECT_SCOPE method defines the search method only within the named object that is defined with ContextName. The object scope compares the named object for some particular attribute or value.
ONELEVEL_SCOPE Search Method
The ONELEVEL_SCOPE method defines the search method for entries that are one level below the named object.
SUBTREE_SCOPE Search Method
The SUBTREE_SCOPE method defines the search method for all entries starting from the named object and all descendants below the named object.
- © 2010, Oracle Corporation and/or its affiliates