Re: searches fail from all points above suffix (rootDSE)

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 05:13 PM 2001-09-01, Kevin J. McCarthy wrote:
>It seems impossible to start a subtree search at the root.

Yes.  A subtree base must be within a naming context else
noSuchObject (or referral) is returned.

>I can not
>locate any records at all (other than a practically useless rootDSE
>object that has no values other than objectClass:OpenLDAProotDSE)

The root DSE contains mostly operational attributes.  Per RFC2251,
servers must only return operational attributes when requested.
OpenLDAP supports the all operational attributes extension
for discovery purposes:

        ldapsearch -x -h localhost -b "" -s base +

Kurt