I ran the following search: ldapsearch -H ldap://localhost -b 'cn=nsAccountInactivationTmp,dc=example' -s sub -Z -x -D 'cn=Directory Manager' -W '(objectClass=*)' '*' I was trying to locate the object: 'cn="cn=nsDisabledRole,dc=example",cn=nsAccountInactivationTmp,dc=example' The search yielded no result, but the same search as: ldapsearch -H ldap://localhost -b 'cn="cn=nsDisabledRole,dc=example",cn=nsAccountInactivationTmp,dc=example' -s base -Z -x -D 'cn=Directory Manager' -W '(objectClass=*)' '*' Works and correctly shows the object. What's wrong with the first query? Other subtree searches on nsContainers work correctly. Sincerely, -- William <william@xxxxxxxxxxxxxxx> -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users