Google Apps Directory Sync Administration Guide - Manual (Page 115)

Configuration 115
LDAP Shared Contacts Search
Rule Field
Description
Scope This determines where in the LDAP directory
this rule applies.
Choose which option to use:
• Sub-tree: All objects matched by the
search, and anything under those objects,
recursively. Sub-tree gives the broadest
search, but for very large organizations
this can be load-intensive and cause
system problems.
• One-level: All objects matched by the
search, and anything one level underneath
them. Does not look further than one level.
One-level provides a limited search that
will avoid causing extreme load for very
large organizations.
• Object: Only objects directly matched by
the search. No recursion of any
kind.Object is rarely used except with very
complex LDAP searches. It allows a
search only on the specified object.
Example: Sub-tree
Rule The search rule for shared contact sync to
match. This rule is a standard LDAP query,
and allows sophisticated logic and complex
rules for searching. For more information
about LDAP search filters, see “About LDAP
Queries” on page 41.
Example 1: To match all contacts:
(objectclass=contact)
Example 2: To match all human users:
• For OpenLDAP:
(objectClass=inetOrgPerson)
• For Active Directory:
(objectClass=person)
• for Lotus Domino:
(objectClass=dominoPerson)