LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

And assume the LDAP-UX product has been configured as follows:
• The configuration profile defines the search filter for the host
service as “(objectclass=ipHost)”.
• The cn attribute for the host service has been mapped to the
hostName attribute.
Then the actual search filter used by ldaphostlist would be:
(&(objectclass=ipHost)(hostName=myhost))
Notes:
• When -f is used and any of the attributes specified in the
search filter have been mapped to “*NULL*”, ldaphostlist
returns an error.
• Attributes that are not part of the LDAP-UX configuration profile
mapping for the host service are not modified. Refer to
RFC2307: An Approach for Using LDAP as a Network
Information Service for the list of attributes that may be mapped.
• Specifying -n and -f on the same command line results in
an error.
-F filter Similar to -f, except that filter is assumed to be immutable,
and the LDAP-UX host filter from the configuration profile is not
amended to the specified filter, nor will attribute mapping apply to
the filter.
Notes:
• When -F is used, the specified filter should still apply to host
entries. ldaphostlist will produce undefined results if the
search filter specified with -F discovers user accounts instead
of host entries.
• Specifying -n and -F on the same command line results in
an error.
-N maxcount Specifies the maximum number of entries to be returned. If this
option is not specified, the maximum number of entries to be
returned is 200 by default (unless -g is specified). Some directory
servers limit the number of entries returned for a particular search
request, regardless of how many entries are requested. If the
maxcount limit is set too high, it might not be possible to determine
if a search has returned complete results, since the directory server
might have truncated the number of returned entries before reaching
the requested maximum count. Although some directory servers will
indicate if a specified search exceeds an enumeration limit, if
maxcount is above the directory server's internal configured limit,
it is not always possible to determine if all results have been
returned. However, a reasonable assumption is that if maxcount
entries have been returned, additional entries are likely still available
that match the search criteria than just those displayed. The -N
option is ignored if the -g option is specified.
-key [ - ] [keyage] Displays the sshPublicKey for each host discovered. If keyage is
preceded by “-”, ldaphostlist displays only those host entries
that have keys that were generated more than keyage days ago.
If keyage is not preceeded by “-”, ldaphostlist displays only
those entries that have keys that are considered expired or that will
344 Command and tool reference