Everyone knows (or should) that in general, searching by objectClass is a "bad thing", e.g (objectClass=user). Why? because objectClass is not indexed, and otherwise unqualified searches will touch every single object in the search scope. Fine for NetPro's AD, but not fine for NIH'...
[More]