On Fri, May 16, 2014 at 8:59 AM, Tuc <[email protected]> wrote: > Is there some way I can modify the query to only get ones that would look > like : > > dn: uid=tuc,ou=People,dc=example,dc=com > objectClass: radiusprofile > objectClass: pwmUser > objectClass: top > VVVVVVVVVVVVVVVVVVV > objectClass: person > ^^^^^^^^^^^^^^^^^^^ > objectClass: posixAccount > objectClass: organizationalPerson > objectClass: inetOrgPerson
An entry matching (objectClass=organizationalPerson) also satisfies (objectClass=person) whether or not you write it explicitly. You can ask for (&(objectClass=organizationalPerson)(!(objectClass=person))) but there won't be any results. Can you back up a few steps and explain the underlying problem you're trying to solve?
