Domino LDAP server subtree search failure

The Domino® LDAP server does not support searching subtrees with multiple level of organizational hierarchy.

For example, an entity in the second level of the organizational structure can be searched using the base search but not with the subtree search.
Organization 1 UniqueName = o=Organization 1,o=Root Organization
A base search with a complete UniqueName works.
[C:\] ldapsearch -h <hostname> -D "cn=admin,o=ibm" -w "password" 
                 -b "o=Organization 1,o=Root Organization" -s base "(objectclass=*)"
However, a subtree search with a first level entity as the search DN fails.
[C:\] ldapsearch -h <hostname> -D "cn=admin,o=ibm" -w "password" 
                 -b "o=Root Organization" "(o=Organization 1)"
This limitation might also cause the getting groups of an entity to fail by returning incorrect empty search results.
Note: When using a Domino version 6 LDAP server, avoid multiple organization structures such as an organization nested under another organization. Searches might fail, if you use that type of organization hierarchy.

Icon that indicates the type of topic Concept topic



Timestamp icon Last updated: March 6, 2017 0:20
File name: dominosubtreefail.html