• Run ldapsearch to retrieve all soft-deleted entries using the ds-soft-delete-entry object class. The following command retrieves all soft-deleted entries on the server
    $ bin/ldapsearch --baseDN dc=example,dc=com \      
      "(objectclass=ds-soft-delete-entry)"