Policy Server Guides › Policy Design Guide › User Directory and Search Dialog Reference › Search LDAP/AD Dialog › Search LDAP/AD Dialog Fields and Controls › LDAP Directory Attribute Search Group Box

LDAP Directory Attribute Search Group Box

Attribute-Value Pair radio button

If selected, the user directory is searched using the attribute/value pair specified in the associated fields:

Attribute field-User directory attribute

For example, to search for a user by telephone number, you might enter telephone in the Attribute field.

Value field—Search string

The search string in this field can contain wild cards. When you click OK, the Policy Server searches for users or groups that contain the attribute you specified in the Attribute field that match the value you entered in the Value field.

Note: The following characters must be "escaped" as part of attribute values when specifying a search expression or an attribute- value pair: close parenthesis ')', open parenthesis '(', and backslash '\'. For example, the following search expression "&(uid=*))(cn=*(*)" must include escape characters (marked in bold) as follows: "&(uid=*\))(cn=*\(*)".

LDAP Query radio button

If selected, the user directory is searched using the LDAP query specified in the associated field.

Search Expression field—LDAP search expression

The Policy Server User Interface automatically adds encapsulating parentheses to the expression. For example, to specify the search filter (&(uid=*)(cn=*)), enter the following Search Expression:

&(uid=*)(cn=*)

OK button

Click to close the Search LDAP Directory Dialog and displays the results in the Directory List Dialog.

More information:

User Disambiguation in an LDAP Directory

Configure User Directory Connections

Directory List Dialog