HP-UX Directory Server 8.1 Administrator (766147-001, March 2014)

does not contain, is, or is not. Enter an attribute value in the text box. To add
additional filters, click More. To remove unnecessary filters, click Fewer.
• Click OK.
9. Click Test to try the filter.
10. Click OK.
NOTE:
The nsRoleDN attribute is an operational attribute and must be explicitly requested in the search
command in the list of search attributes. For example:
ldapsearch ... args ... “(uid=scarter)” \* nsRole nsRoleDN
The Directory Server Console automatically shows the nsRoleDN attribute.
Creating a nested role
Nested roles are roles that contain other roles. Before it is possible to create a nested role, another
role must exist. When a nested role is created, the Console displays a list of the roles available
for nesting. The roles nested within the nested role are specified using the nsRoleDN attribute.
Using roles 175