Quanah Gibson-Mount wrote:


--On May 16, 2014 at 10:02:04 AM -0700 Howard Chu <[email protected]> wrote:

But you could, of course, filter on
(&(objectclass=person)(!(objectclass=inetorgperson))) if you wanted.

(&(objectclass=person)(!(objectclass=inetorgperson))(!(objectclass=
organizationalPerson)))

would probably be even better as far as achieving their stated objective,
if what they want is object that only have "person".

If so, then they should just use
(&(objectclass=person)(!(objectclass=organizationalperson)))

since that will automatically exclude inetorgperson too.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

Reply via email to