Overview#

Some Examples on How To use ldapsearch with the Manage DSA IT Control

The Manage DSA IT Control allows the client to request that the server treat smart referrals as regular entries during the search. A smart referral is an entry that references another server or location in the directory information tree DIT and contains the referral object class with one or more attributes containing the LDAP URLs that specify the referral.

You can specify the Manage DSA IT Control with ldapsearch in a number of ways:

• OID. Use the --control or -J option with the Manage DSA IT Control OID: 2.16.840.1.113730.3.4.2 with no value.
• Named constant. Use the named constant, managedsait with the --control or -J option instead of the Manage DSA IT Control OID. For example, use -J managedsait with the ldapsearch command.

Run the ldapsearch command with the -J option.#

Not all LDAP search utilities support using controls.

Here is a LDAP Query Example Using the Manage DSA IT Control on a particular LDAP Server:

$ ldapsearch -h localhost -p 1389 -D "cn=Directory Manager" -w password -b dc=example,dc=com -J managedsait "(uid=president)" ref dn: uid=president,ou=People,dc=example,dc=com ref: ldap://example.com:389/dc=example,dc=com??sub?(uid=bjensen)

Note - Without the -J managedsait argument, the command returns the referred entry.

More Information#

There might be more information for this subject on one of the following:

• Manage DSA IT Control
• Searching Using Controls