Overview #An AND LDAP Filter Choice is intended to serve as a container that holds zero or more other LDAP SearchFilters.
In order for an entry to match an AND filter, it must match all of the LDAP SearchFilters contained in the AND filter.
AND filters may be represented as a string by enclosing the entire filter in parentheses and placing an ampersand just after the opening parenthesis.
For example, a filter of
(&(objectClass=person)(uid=john.doe))represents an AND SearchFilter that embeds the "(objectClass=person)" and "(uid=john.doe)" equality filters.
AND SearchFilter that does not contain any embedded filters is called an Absolute True and False Filters. The string representation for an LDAP true filter is "(&)", and LDAP true filters will always match any target entry.