Quanah Gibson-Mount wrote:
--On May 16, 2014 at 10:02:04 AM -0700 Howard Chu <hyc@symas.com> wrote:But you could, of course, filter on (&(objectclass=person)(!(objectclass=inetorgperson))) if you wanted.(&(objectclass=person)(!(objectclass=inetorgperson))(!(objectclass= organizationalPerson))) would probably be even better as far as achieving their stated objective, if what they want is object that only have "person".
If so, then they should just use (&(objectclass=person)(!(objectclass=organizationalperson))) since that will automatically exclude inetorgperson too. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/