Overview#

The AttributeSelection element of a search request provides a way of representing the attributes that should be included in SearchResultEntry.

In general, AttributeSelection is the set of attributes is a list of zero or more Attribute-Names for the attributes to return.

Attributes are returned at most once in an entry. If an attribute description is named more than once in the list, the subsequent names are ignored. If an attribute description in the list is not recognized, it is ignored by the server.

If no Attribute-Names are specified, then all user attributes and no Operational Attribute will be returned.

Client implementers should note that even if all user attributes are requested, some attributes and/or attribute values of the entry may not be included in Search results due to access controls or other restrictions. Furthermore, servers will not return Operational Attributes, such as objectClasses or attributeTypes, unless they are listed by name. OR one of the attributeSelectors are used.

attributeSelector#

In addition to specific attribute descriptions, a number of special values may be provided with various meanings:

• The string "1.1" (RFC 4511 noattrs) A list containing only the OID "1.1" indicates that no attributes are to be returned. If "1.1" is provided with other attributeSelector values, the "1.1" attributeSelector is ignored.
• The string "*" (the asterisk) may be provided to indicate that all user attributes should be included in matching entries. This may be needed if the server should return all user attributes in addition to one or more operational attributes.
• The string "+" (the plus sign) (RFC 3673 is a SupportedFeature 1.3.6.1.4.1.4203.1.5.1) may be provided to indicate that all Operational Attributes should be included in matching entries.
• The string "@" ( RFC 4529 is a supportedFeature OID 1.3.6.1.4.1.4203.1.5.2) for Requesting Attributes by Object Class

More Information#

There might be more information for this subject on one of the following:

• 1.3.6.1.4.1.4203.1.5.2
• Access Log
• DirXML-DriverStartOption
• Glossary Of LDAP And Directory Terminology
• LDAP Post-Read Control
• LDAP Pre-Read Control
• LDAP URL
• OperationalAttribute
• Requesting Attributes by Object Class
• SearchRequest
• SupportedFeatures
• Unindexed Search

---

• [#1] - LDAPv3 Wire Protocol Reference: The LDAP Search Operation - based on information obtained 2018-11-08-