Overview#
The LDAP search scope indicates the set of entries at or below the BaseDN that may be considered potential matches for a SearchRequest.LDAP Search Scopes are "officially" defined in the Internet Assigned Numbers Authority (IANA) Considerations for the Lightweight Directory Access Protocol (LDAP) by RFC 4520.
LDAP Search Scopes are listed within an IANA Registry at: LDAP Search Scopes
And we outline them below:
| Name | URLString | Value | Owner | Reference |
|---|---|---|---|---|
| baseObject | base | 0 | IESG | RFC 4516 RFC 4511 |
| singleLevel | one | 1 | IESG | RFC 4516 RFC 4511 |
| wholeSubtree | sub | 2 | IESG | RFC 4516 RFC 4511 |
| subordinateSubtree | sub | 3 | Draft-sermersheim-ldap-subordinate-scope |
subordinateSubtree is NOT an IANA Registry entry but is supported by several LDAP Server Implementations
Many of these are shown in LDAP Query Examples
More Information#
There might be more information for this subject on one of the following:- Access Log
- AllowedAttributesEffective
- Apache Web Server and LDAP
- BaseDN
- BaseObject
- Draft-sermersheim-ldap-subordinate-scope
- Glossary Of LDAP And Directory Terminology
- LDAP
- LDAP Query Examples for AD
- LDAP Searches
- LDAP URL
- LDAP ping
- Lightweight Directory Access Protocol (LDAP) Parameters
- Retrieving RootDSE
- SearchRequest
- SearchResultReference
- SingleLevel
- SubordinateSubtree
- WholeSubtree
- X-SEARCH-FLAGS