Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 18 Jan 2009 22:32:50 -0600
From:      Dan Nelson <>
To:        Jay Hall <>
Subject:   Re: ldapsearch question
Message-ID:  <>
In-Reply-To: <>
References:  <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
In the last episode (Jan 18), Jay Hall said:
> I am running the following against an Active Directory server.
> ldapsearch -D "cn=admin_user,cn=users,dc=xx,dc=com" -x -w "password" - 
> h -p 3268 -b 'dc=abc,dc=com' -s sub 
> '(!(objectclass=computer))' '(!(mail=*))' dn mail
> I am trying to return only objects for which the mail attribute is  
> defined.  I think my search is incorrect, and I am searching for the  
> mail attribute being null.

Your search filter is currently (!(objectclass=computer)) , and you
are asking for the attributes (!(mail=*)), dn, and mail to be returned. 
I think you want this: '(&(!(objectclass=computer))(mail=*))' i.e.
(objectclass isn't computer) AND (mail attribute is present).

	Dan Nelson

Want to link to this message? Use this URL: <>