HP UX Identity Security Software manual Additional ldapsearch options

Table 6-10 Additional ldapsearch options (continued)

Option	Description
-f	Specifies the file containing the search filters to be used in the search. For example:
	-f search_filters
	option to supply a search filter directly to the command line.
	For more information about search filters, see Appendix B, "Finding Directory Entries", in the HP-UX
	Directory Server administrator guide.
-G	Conducts a virtual list view search. This option can set the number of entries before or after the
	search target and the index or value of the first entry returned.
	For example, a value operation that sorts by surname, -G 20:30:johnson, returns the first entry
	with a surname equal to or less than johnson, in addition to 20 entries that come before it and 30
	entries that come after it. If there are fewer matching entries in the directory than the before or after
	number requested by the search, all available entries before/after the search target that match the
	search criteria are returned.
	An index operation which sorts by surname, -G 20:30:100:0, returns from the 80th through
	130th entries sorted by sn. Use 0 as the fourth value for the count number unless you know how
	many entries the VLV index has.
-i	Specifies the characterset to use for command-line input. The default is the characterset specified
	in the LANG environment variable. Use this option to perform the conversion from the specified
	characterset to UTF8, thus overriding the environment variable setting.
	This argument can input the bind DN, base DN, and the search filter pattern in the specified
	characterset.
	The ldapsearch command converts the input from these arguments before it processes the search
	request. For example, -i no indicates that the bind DN, base DN, and search filter are provided
	in Norwegian. This argument only affects the command-line input; that is, if a file containing a
	search filter (with the -foption) is specified, the ldapsearch command will not convert the data
	in the file.
-J	Send an arbitrary control. This option can be used in the following format to retrieve access control
	information on a specific entry:
	-Jcontrol OID:boolean criticality:dn:AuthID
	•	control OID is the OID for the get effective rights control, 1.3.6.1.4.1.42.2.27.9.5.2.
	•	boolean criticality specifies whether the search operation should return an error if the
		server does not support this control (true) or if it should be ignored and let the search return
		as normal (false).
	• AuthId is the DN of the user whose rights to check.
-k	Bypasses converting the password to UTF8.
-M	Manages smart referrals. This causes the server not to return the smart referral contained on the
	entry but, instead, to return the actual entry containing the referral. Use this option to search for
	entries that contain smart referrals. For more information about smart referrals, see the "Configuring
	Directory Databases" chapter in the HP-UX Directory Server administrator guide.
-n	Specifies that the search is not actually to be performed, but that the ldapsearch command is to
	show what it would do with the specified input.
-O	Specifies the maximum number of referral hops ldapsearch should automatically follow. For
	example:
	-O 2
-R	Specifies that referrals are not to be followed automatically. By default, referrals are followed
	automatically.

200 Command-line utilities