ldapsearch --hostname localhost --port 1389 \
 --bindDn "cn=directory manager" --bindPassword password \
 --baseDn dc=example,dc=com --searchScope sub \
 --sizeLimit 3 '(ou:dn:caseIgnoreMatch:=people)' uid

# -=-=-=-=-=-=-=-

ldapsearch -h localhost -p 1389 \
 -D 'cn=directory manager' -w password \
 -b 'dc=example,dc=com' -s sub \
 -z 3 '(ou:dn:caseIgnoreMatch:=people)' uid

Use an extensible match filter to discover entries beneath and including a portion of the DN. Uses the older OpenLDAP ldapsearch syntax and the modern ldapsearch syntax.

Extensible match filter example

Bash