Problems with LDAP queries against Domino Directory

HCL Domino Domino Forum
1

HiI have enabled my domino directory to be published as ldap and available for anonymous queries

If I run

ldapsearch -h myldaphost cn=*

I get a list of all entries, and a person is i.e.:

CN=FirstName LastName,O=DominoCertifier

objectclass=dominoPerson

…

cn=FirstName LastName

uid=userid

…

so far so good,

I would suppose that I could query my ldap with something like:

ldapsearch -h myldaphost O=DominoCertifier

and get a list of all entries that have that certifier (including my user. But that does not work, the query returns only 1 entry for the certifier.

I tried using a more complex filter like

ldapsearch -h myldaphost “(&(cn=*)(O=DominoCertifier))”

This in my opinion should return all entries with the above mentioned certifier, but it returns nothing.

I am missing something? Do I need to enable somthing on ldap or domino directory to peform this kind of query?

/Andreas

2

Subject: Problems with LDAP queries against Domino Directory

HiI have enabled my domino directory to be published as ldap and available for anonymous queries

If I run

ldapsearch -h myldaphost cn=*

I get a list of all entries, and a person is i.e.:

CN=FirstName LastName,O=DominoCertifier

objectclass=dominoPerson

…

cn=FirstName LastName

uid=userid

…

so far so good,

I would suppose that I could query my ldap with something like:

ldapsearch -h myldaphost O=DominoCertifier

and get a list of all entries that have that certifier (including my user. But that does not work, the query returns only 1 entry for the certifier.

I tried using a more complex filter like

ldapsearch -h myldaphost “(&(cn=*)(O=DominoCertifier))”

This in my opinion should return all entries with the above mentioned certifier, but it returns nothing.

I am missing something? Do I need to enable somthing on ldap or domino directory to peform this kind of query?

There are 3 parts that determines the objects to return from an LDAP search

scope

base

filter

Try ldapsearch with no arguments to get its help.

In your example above, you are only specifying a filter. To perform your search for all objects under O=DominoCertfier, simply re-use your initial search with the O=DominoCertifier as the base. i.e.,

ldapsearch -h myldaphsost -b “o=dominocertifier” “cn=*”

3

Subject: RE: Problems with LDAP queries against Domino Directory

Thanks for the explanation