Operator | Example | Matches |
---|---|---|
=* | (mail=*) | All entries that contain a mail attribute. |
= | (o=adobe) | Entries in which the organization name is adobe. |
~= | (sn~=Hansen) | Entries with a surname that approximates Hansen. The matching rules for approximate matches vary among directory vendors, but anything that 'sounds like' the search string should be matched. In this example, the directory server might return entries with the surnames Hansen and Hanson. |
>= | (st>=ma) | The name 'ma' and names appearing after 'ma' in an alphabetical state attribute list. |
<= | (st<=ma) | The name 'ma' and names appearing before 'ma' in an alphabetical state attribute list. |
* | (o=macro*) | Organization names that start with 'macro'. |
(o=*media) | Organization names that end with 'media'. | |
(o=mac*ia) | Organization names that start with 'mac' and end with 'ia'. You can use more than one * operator in a string; for example, m*ro*dia. | |
(o=*med*) | Organization names that contain the string 'med', including the exact string match 'med'. | |
& | (&(o=adobe)(co=usa)) | Entries in which the organization name is 'adobe' and the country is 'usa'. |
| | (|(o=adobe)(sn=adobe)(cn=adobe)) | Entries in which the organization name is 'adobe' or the surname is 'adobe', or the common name is 'adobe'. |
! | (!(STREET=*)) | Entries that do not contain a StreetAddress attribute. |
Character | Escape sequence |
---|---|
* | 2A |
( | 28 |
) | 29 |
|5C | |
NUL | 00 |
filter='(&(cn=Robert Jones)(cn=Bobby Jones))' |
filter='(objectclass=inetorgperson)' |
<cfldap name='GetList' server=#myServer# action='query' attributes='*' scope='subtree' start='o=airius.com' sort='sn,cn'> |
<!--- This example shows the use of CFLDAP ---> <html> <head> <title>cfldap Query Example</title> </head> <h3>cfldap Query Example</h3> <body> <p>This tool queries the Airius.com database to locate all people in the company's Santa Clara office whose common names contain the text entered in the form.</p> <p>Enter a full name, first name, last name, or name fragment.</p> <form action='cfldap.cfm' method='POST'> <input type='text' name='name'><br><br> <input type='submit' value='Search'> </form> <!--- make the LDAP query ---> <!-- Note that some search text is required. A search filter of cn=** would cause an error --> <cfif (isdefined('form.name') AND (form.name IS NOT '))> <cfldap server='ldap.airius.com' action='query' name='results' start='ou=People, o=Airius.com' scope='onelevel' filter='(&(cn=*#form.Name#*)(l=Santa Clara))' attributes='cn,sn,ou,mail,telephonenumber' sort='ou,sn' maxrows=100 timeout=20000 > <!--- Display results ---> <table border=0 cellspacing=2 cellpadding=2> <tr> <th colspan=4><cfoutput>#results. RecordCount# matches found</cfoutput> </th> </tr> <tr> <th>Name</th> <th>Department</th> <th>E-Mail</th> <th>Phone</th> </tr> <cfoutput query='results'> <tr> <td>#cn#</td> <td>#listFirst(ou)#</td> <td><a href='mailto:#mail#'>#mail#</a></td> <td>#telephonenumber#</td> </tr> </cfoutput> </table> </cfif> </body> </html> |
Code | Description | |
---|---|---|
| Uses a form to get the name or name fragment to search for. | |
| Ensures that the user has submitted the form. This is necessary because the form page is also the action page. Ensures that the user entered search text. | |
| Connects anonymously to LDAP server ldap.airius.com, query the directory, and return the results to a query object named results. Starts the query at the directory entry that has the distinguished name ou=People, o=Airius.com, and searches the directory level immediately below this entry.Requests records for entries that contain the location (l) attribute value 'Santa Clara' and the entered text in the common name attribute.Gets the common name, surname, organizational unit, e-mail address, and telephone number for each entry.Sorts the results first by organization name, then by surname. Sorts in the default sorting order.Limit the request to 100 entries. If the server does not return the data in 20 seconds, generates an error indicating that LDAP timed out. | |
| Starts a table to display the output. Displays the number of records returned. Displays the common name, department, e-mail address, and telephone number of each entry.Displays only the first entry in the list of organizational unit values. (For more information, see the description that follows this table.) |
Developer | Software license[a] | Comments | |
---|---|---|---|
389 Directory Server (formerly Fedora Directory Server) | Red Hat | GPL linking exception[7] with exception to allow linking to non-GPL[8] | |
Active Directory | Microsoft | Proprietary | |
Authorized Entities Directory (Æ-DIR) | Michael Ströder | Apache License 2.0 | based on OpenLDAP with additional tools |
Apache Directory Server | Apache Software Foundation | Apache License 2.0 | |
Apple Open Directory - A fork of the OpenLDAP project | Apple Inc. | Proprietary[9] | |
BEJY LDAP Server,[10] a Java LDAP Server. | Stefan 'Bebbo' Franke | GPL | |
CA Directory | CA Technologies | Proprietary | |
Critical Path Directory Server | Critical Path | Proprietary | Now owned by Synchronoss Technologies. |
Directory services - A fork of the OpenDJ project | ForgeRock | Proprietary | |
DirX Directory | Atos (ex-Siemens) | [citation needed] | |
FreeIPA | Red Hat (using 389 Directory Server) | GPL | |
IBM Tivoli Directory Server | IBM | Proprietary | |
ldapjs,[11] implementation of LDAP in JavaScript on Node.js. | Mark Cavage[12] | MIT License | |
Mandriva Directory Server, now part of Mandriva Management Console | Mandriva development team | GPL | |
Nexor Directory | [citation needed] | [citation needed] | |
NetIQ eDirectory | NetIQ | Proprietary | Successor to eDirectory and NDS |
OpenBSD ldapd[13] | Martin Hedenfalk, OpenBSD | ISC | |
OpenDJ | Open Identity Platform Community | CDDL | A fork of the OpenDS project developed by ForgeRock, until 2016[14] , now maintained by OpenDJ Community |
OpenDS | Sun Microsystems | CDDL | CDDL-licensed product no longer maintained, now Oracle Unified Directory. |
OpenLDAP | Kurt Zeilenga and others (based on Slapd) | OpenLDAP Public License | |
Oracle Directory Server Enterprise Edition[15] | Oracle, based on Sun DSEE | Proprietary | |
Oracle Internet Directory | Oracle | Proprietary | |
Oracle Unified Directory | Oracle, based on OpenDS | Proprietary | |
PingDirectory (formerly UnboundID Directory Server[16]) | Ping Identity | Proprietary | Based on OpenDS. UnboundID was purchased by Ping |
RadiantOne | Radiant Logic | [citation needed] | |
Red Hat Directory Server | Red Hat | GPL plus exception | Commercial version of 389 Directory Server |
ReOpenLDAP[17] | Peter-Service R&D | AGPL and OpenLDAP Public License | fork of OpenLDAP with improved stability for highload and multi-master clustering |
Samba4 - Active Directory compatible Domain Controller | Samba Team | GPLv3 | |
Slapd - Standalone LDAP Daemon | University of Michigan | Free[citation needed] | superseded by OpenLDAP[18] |
Sun Java System Directory Server | Sun Microsystems | [citation needed] | no longer maintained |
|dead-url=
(help)