I have been in ntu general company involved in support of this kind of small database products, below is I to the product, and some experience of this type of LDAP products and usage, interested friends to accept, ha,

How to fill out the "join condition" and "query" in the "filter"?
Answer: the search filter is a query string, which is used to filter the directory entry, need to return the matching records set, filters AND representative AND (AND) OR brackets (OR) NOT (NOT) symbol & amp; , |! Said, if you want to search a name begin with Tony's all, you can use the following filters: (& amp; (objectclass=person) (cn=Tony *)) this expression says search all object such as a person, and common name begin with Tony's names, like other LDAP attributes, the cn attribute is case-insensitive, therefore with or Tony Tony * * instead of Tony * does not affect the query results, the filter can be nested arbitrary layer: (& amp; (objectclass=person) (| (cn=samcarter) (cn=Tony *))) use operators, and parentheses can construct a complex filter, logical operators should contain more expression in parentheses, use nested parentheses to specify the order of the operator, the following table lists the used to search all operators:

Table search filter operator
===================
Meaning operator
| or
& With the
! The
=entry attribute is equal to a value (e.g., cn=liutao)
=* all have a certain attribute values entries (cn=* is used to specify all,