To search for all immediate children of restricted return values, run the
ldapsearch tool.
Note:
The special attribute "+" returns all operational attributes.
In this sample, the immediate children are
ou=People,dc=example,dc=com, and the restricted returned
values are sn and givenName.
$ bin/ldapsearch --baseDN ou=People,dc=example,dc=com \
--searchScope one '(objectclass=*)' sn givenName "+"