From owner-freebsd-questions@FreeBSD.ORG Mon Jan 19 04:20:48 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1D5D21065672 for ; Mon, 19 Jan 2009 04:20:48 +0000 (UTC) (envelope-from on@cs.ait.ac.th) Received: from mail.cs.ait.ac.th (mail.cs.ait.ac.th [192.41.170.16]) by mx1.freebsd.org (Postfix) with ESMTP id 95FA28FC08 for ; Mon, 19 Jan 2009 04:20:47 +0000 (UTC) (envelope-from on@cs.ait.ac.th) Received: from banyan.cs.ait.ac.th (banyan.cs.ait.ac.th [192.41.170.5]) by mail.cs.ait.ac.th (8.13.1/8.13.1) with ESMTP id n0J4HiTJ026640 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 19 Jan 2009 11:17:44 +0700 (ICT) (envelope-from on@banyan.cs.ait.ac.th) Received: (from on@localhost) by banyan.cs.ait.ac.th (8.14.2/8.12.11) id n0J4KgYQ086801; Mon, 19 Jan 2009 11:20:42 +0700 (ICT) Date: Mon, 19 Jan 2009 11:20:42 +0700 (ICT) Message-Id: <200901190420.n0J4KgYQ086801@banyan.cs.ait.ac.th> From: Olivier Nicole To: jhall@socket.net In-reply-to: <9DFC15B7-CA66-4717-956D-1A761E8539AD@socket.net> (message from Jay Hall on Sun, 18 Jan 2009 22:04:50 -0600) References: <200901190353.n0J3rwFX083175@banyan.cs.ait.ac.th> <9DFC15B7-CA66-4717-956D-1A761E8539AD@socket.net> X-Virus-Scanned: on CSIM by amavisd-milter (http://www.amavis.org/) Cc: freebsd-questions@freebsd.org Subject: Re: ldapsearch question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Jan 2009 04:20:48 -0000 > I receive the same results using mail=*. Following is the latest > ldapsearch command. > > ldapsearch -D "cn=admin_user,cn=users,dc=xx,dc=com" -x -w "password" - > h 10.129.10.42 -p 3268 -b 'dc=abc,dc=com' -s sub '(! > (objectclass=computer))' '(mail=*)' dn mail > > Is it possible to search on the attribute, mail, not being present? Hummm, that may be a feature from Active directory. When searching in LDAP: attribue=* means the attribute is present and set !(attribute=*) means the attribute is not set or the attribute is not present (this attribute does not exist for that object, or the attribute exist for the object but is not being used) I am not using active directory but OpenLDAP, so I canno help further. Bests, Olivier