The following table contains descriptions of the ldapsearch command arguments. For additional information, see Working with Ldapsearch.
| Command Arguments | Description |
|---|---|
| -b " " | Specifies the search base. Because the RootDSE object has no name, the argument passes a zero-length string. |
| -D | Specifies the directory user ID in the form of a dn. Use only when ldapsearch specifies simple binding (-x). |
| -H ldap://esroot | Identifies the binding scheme and the directory server name. |
| namingContexts | Limits the output of the ldapsearch and does not return other information. |
| -s base | Specifies the scope of the search, from among three choices:
The examples use base to indicate that the scope is the base. |
| -U | The SASL user ID. Use this argument to specify the user ID only when also specifying -Y DIGEST-MD5 binding.
Teradata LDAP authentication does not support DIGEST-MD5. DIGEST-MD5 must not be used. Use SIMPLE binding instead.
|
| -W | Requests a prompt for entry of the password for the user. |
| -x | Specifies simple binding for the ldapsearch. The binding method specified for ldapsearch is independent of the binding method you use generally for LDAP authentication. |
| -Z | Requests TLS protection. The directory server may or may not grant the request, and if not, the connection runs in plain text. To ensure TLS protection, use -ZZ. |