On Tue, 2015-04-07 at 15:00 -0600, Rich Megginson wrote: > On 04/07/2015 12:00 AM, William wrote: > > I ran the following search: > > > > ldapsearch -H ldap://localhost -b > > 'cn=nsAccountInactivationTmp,dc=example' -s sub -Z -x -D 'cn=Directory > > Manager' -W '(objectClass=*)' '*' > > > > > > I was trying to locate the object: > > > > 'cn="cn=nsDisabledRole,dc=example",cn=nsAccountInactivationTmp,dc=example' > > > > > > The search yielded no result, but the same search as: > > > > ldapsearch -H ldap://localhost -b > > 'cn="cn=nsDisabledRole,dc=example",cn=nsAccountInactivationTmp,dc=example' -s base -Z -x -D 'cn=Directory Manager' -W '(objectClass=*)' '*' > > > > Works and correctly shows the object. What's wrong with the first query? > > Missing (objectclass=ldapsubentry) > > Entries with objectclass: ldapsubentry are hidden unless you explicitly > specify them with either a search of scope "base", or by specifying > "objectclass=ldapsubentry" in the search filter. > Ahhh that explains it. Thanks for clarifying. > > Other subtree searches on nsContainers work correctly. > > nsContainers that are also objectclass: ldapSubEntry? No, the other containers did not have this objectClass. -- William <william@xxxxxxxxxxxxxxx> -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users