On 04/07/2015 12:00 AM, William wrote: > I ran the following search: > > ldapsearch -H ldap://localhost -b > 'cn=nsAccountInactivationTmp,dc=example' -s sub -Z -x -D 'cn=Directory > Manager' -W '(objectClass=*)' '*' > > > I was trying to locate the object: > > 'cn="cn=nsDisabledRole,dc=example",cn=nsAccountInactivationTmp,dc=example' > > > The search yielded no result, but the same search as: > > ldapsearch -H ldap://localhost -b > 'cn="cn=nsDisabledRole,dc=example",cn=nsAccountInactivationTmp,dc=example' -s base -Z -x -D 'cn=Directory Manager' -W '(objectClass=*)' '*' > > Works and correctly shows the object. What's wrong with the first query? Missing (objectclass=ldapsubentry) Entries with objectclass: ldapsubentry are hidden unless you explicitly specify them with either a search of scope "base", or by specifying "objectclass=ldapsubentry" in the search filter.

> Other subtree searches on nsContainers work correctly. nsContainers that are also objectclass: ldapSubEntry?