limiting scope of ldap_search

[dedalus]

Is there any way to limit the scope of an ldap_search? The documentation on php.net seems to say that you can only search the entire LDAP_SCOPE_SUBTREE, and not just a subdirectory. Is there any way around this?

The LDAP database I am searching is so large that the search times out if my script searches the whole thing.

[TTT]

i have also problems with ldap .... i know taht you can add some filters
$filter="(&(memberof=) (objectclass=person))";
or
$filter="objectclass=group";
or
$filter = "(&(sAMAccountName=$username*)(objectcategory=CN=Person,CN=Schema,CN=Configuration,DC=ad,DC=net))";

do you know how can i get ip list of users? i think that it's only way to get current user....

[Sxooter]

I'm pretty sure it's the "base dn" that allows you to limit the search to sub domains.

i.e.:

$basedn = "ou=marketing,o=northpole";
$rh = ldap_search($link,$basedn,$filter);

will only search in the base dn of ou=marketing,o=northpole, even if the basedn of the master ldap database is o=northpole.