Wilmer Jaramillo M. wrote:

The Directory Server by default allow make consults anonymous with ldapsearch, this is ok, nevertheless, exists the way of limit the number of attributes/lines/output show with anonymous user?, also to implement rules in where the user and administrator's users only can see a max of N atributes in a search for example, of the attribute 'mail'. ej. $ ldapsearch -x mail 1.- # Afrodita Alvarez, joe, People, example.com dn: cn=Afrodita Alvarez,uid=wilmer,ou=People,dc=example,dc=com mail: aalvarez@example.com 2.- # aperez, juancarlos, People, example.com dn: uid=aperez,uid=juancarlos,ou=People,dc=example,dc=com mail: aperez@example.com ... N.- ...Full Users Output.

I want: $ ldapsearch -x mail 1.- # Afrodita Alvarez, joe, People, example.com dn: cn=Afrodita Alvarez,uid=wilmer,ou=People,dc=example,dc=com mail: aalvarez@example.com 2.- # aperez, juancarlos, People, example.com dn: uid=aperez,uid=juancarlos,ou=People,dc=example,dc=com mail: jcarlos@example.com ... 25.- .... only max. 25 users.

Set the attribute nsslapd-sizelimit in cn=config. You can also set size limits on a per-user/per-group basis. See http://www.redhat.com/docs/manuals/dir-server/ag/7.1/password.html#1085603 for more information.

thanks.