Or operator in LDAP queries

can use or operator in ad queries like following:

(&(&(|(&(objectcategory=person)(objectsid=*)(!samaccounttype:1.2.840.113556.1.4.804:=3))(&(objectcategory=person)(!objectsid=*))(&(objectcategory=group)(grouptype:1.2.840.113556.1.4.804:=14)))(objectcategory=user)(objectclass=user)(sn=s*)(givenname=s*)))

made dsa.msc , i'm using sort of template scripts.

my question piece of query: (sn=s*)(givenname=s*)

is there way (sn=s*) or (givenname=s*) can return both sn , givenname attributes start "s"?

i can see pipe operator can used in these queries, i'm not sure syntactically how\where plug in- or if can done.

you need replace:

(sn=s*)(givenname=s*)

...with:

(|(sn=s*)(givenname=s*))

---

tony www.activedir.org blog:www.open-a-socket.com

Windows Server  >  Directory Services