• To search for all immediate children of restricted return values, run the ldapsearch tool.
    Note:

    The special attribute "+" returns all operational attributes.

    In this sample, the immediate children are ou=People,dc=example,dc=com, and the restricted returned values are sn and givenName.

    $ bin/ldapsearch --baseDN ou=People,dc=example,dc=com \ 
      --searchScope one '(objectclass=*)' sn givenName "+"