Active Roles 7.3.1 - User Guide

Introduction Getting Started User or Service Account Management Group Management Computer Account Management Organizational Unit Management Management of Contacts Management of Exchange Recipients

Search filter format

Search filter format

Search filters use one of the following formats:

<filter>=(<attribute><operator><value>)

or

(<operator><filter1><filter2>)

In this example, <attribute> stands for the LDAP display name of the attribute by which you want to search.

Operators

Operators

The following table lists some frequently used search filter operators.

Table 6: Operators

Logical Operator

Description

=

Equal to

~=

Approximately equal to

<=

Lexicographically less than or equal to

>=

Lexicographically greater than or equal to

&

AND

|

OR

!

NOT

Wildcards

Wildcards

You can also add wildcards and conditions to a search filter. The following examples show substrings that can be used to search the directory.

Get all entries:

(objectClass=*)

Get entries containing “bob” somewhere in the common name:

(cn=*bob*)

Get entries with a common name greater than or equal to “bob”:

(cn>='bob')

Get all users with an e-mail attribute:

(&(objectClass=user)(mail=*))

Get all user entries with an e-mail attribute and a surname equal to “smith”:

(&(sn=smith)(objectClass=user)(mail=*))

Get all user entries with a common name that starts with “andy”, “steve”, or “margaret”:

(&(objectClass=user) | (cn=andy*)(cn=steve)(cn=margaret))

Get all entries without an e-mail attribute:

(!(mail=*))

Special characters

Special characters

If any of the following special characters must appear in the search filter as literals, they must be replaced by the listed escape sequence.

Table 7: Special characters

ASCII Character

Escape Sequence Substitute

*

\2a

(

\28

)

\29

\

\5c

NUL

\00

In addition, arbitrary binary data may be represented using the escape sequence syntax by encoding each byte of binary data with the backslash (\) followed by two hexadecimal digits. For example, the four-byte value 0x00000004 is encoded as \00\00\00\04 in a filter string.

Related Documents