5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher<listitem>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher <para>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher An optional base DN, search scope and LDAP filter
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher to restrict LDAP searches for this attribute type.
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher </para>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher <para>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher syntax:
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher<programlisting>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallaghersearch_base[?scope?[filter][?search_base?scope?[filter]]*]
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher</programlisting>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher </para>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher <para>
78d603a2e953af2443efca54451cdd77c7a55707Jakub Hrozek The scope can be one of "base", "onelevel" or "subtree". The
78d603a2e953af2443efca54451cdd77c7a55707Jakub Hrozek scope functions as specified in section 4.5.1.2 of
78d603a2e953af2443efca54451cdd77c7a55707Jakub Hrozek http://tools.ietf.org/html/rfc4511
78d603a2e953af2443efca54451cdd77c7a55707Jakub Hrozek </para>
78d603a2e953af2443efca54451cdd77c7a55707Jakub Hrozek <para>
78d603a2e953af2443efca54451cdd77c7a55707Jakub Hrozek The filter must be a valid LDAP search
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher filter as specified by
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher http://www.ietf.org/rfc/rfc2254.txt
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher </para>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher <para>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher For examples of this syntax, please refer to the
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher <quote>ldap_search_base</quote> examples section.
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher </para>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher <para>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher Default: the value of
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher <emphasis>ldap_search_base</emphasis>
5ef295d1cf410ceaa92c03a7843df8a36409f465Stephen Gallagher </para>
c3869cac3143e3084e95521d76fe7345b3c8d00fJakub Hrozek <para>
c3869cac3143e3084e95521d76fe7345b3c8d00fJakub Hrozek Please note that specifying scope or filter is not supported for
c3869cac3143e3084e95521d76fe7345b3c8d00fJakub Hrozek searches against an Active Directory Server that might yield a
c3869cac3143e3084e95521d76fe7345b3c8d00fJakub Hrozek large number of results and trigger the Range Retrieval extension
c3869cac3143e3084e95521d76fe7345b3c8d00fJakub Hrozek in the response.
c3869cac3143e3084e95521d76fe7345b3c8d00fJakub Hrozek </para>
c3869cac3143e3084e95521d76fe7345b3c8d00fJakub Hrozek</listitem>