Some supported directories make a distinction between operational and user attributes. Servers that have such distinctions frequently specify special attribute names that mean “all user attributes” and “all operational attributes.” Common operational attributes may include creation and modification times.
Oracle Directory Server Enterprise Edition, Active Directory, ADAM, and AD LDS do not support special attribute names.
Other servers may allow the name “*” to mean “all user attributes” and “+” to mean “all operational attributes.”
When you use ldapsearch to examine an entire OpenLdap RootDSE object, you must use the following commands: