Red Hat Directory Server 8.0 Administrator's Guide

Performing an international substring search searches for all values that match the given pattern
in the specified collation order.
For example, to search for all user IDs that end in ming in the Chinese collation order, any of the
following matching rule filters would work:
uid:2.16.840.1.113730.3.3.2.49.1:=* *ming
...
uid:zh:=* *ming
...
uid:2.16.840.1.113730.3.3.2.49.1.6:=* *ming
..
uid:zh.6:=* *ming
Substring search filters that use DN-valued attributes, such as modifiersName or memberOf, do
not always match entries correctly if the filter contains one or more space characters.
To work around this problem, use the entire DN in the filter instead of a substring, or ensure that
the DN substring in the filter begins at an RDN boundary; that is, make sure it starts with the
type= part of the DN. For example, this filter should not be used:
(memberof=*Domain Administrators*)
But either one of these will work correctly:
(memberof=cn=Domain Administrators*)
...
(memberof=cn=Domain Administrators,ou=Groups,dc=example,dc=com)
Appendix B. Finding Directory Entries
570