In order for an entry to match an AND filter, it must match all of the LDAP SearchFilters contained in the AND filter.
AND filters may be represented as a string by enclosing the entire filter in parentheses and placing an ampersand just after the opening parenthesis.
For example, a filter of
(&(objectClass=person)(uid=john.doe))represents an AND SearchFilter that embeds the "(objectClass=person)" and "(uid=john.doe)" equality filters.
AND SearchFilter that does not contain any embedded filters is called an Absolute True and False Filters. The string representation for an LDAP true filter is "(&)", and LDAP true filters will always match any target entry.