title: AD search filter syntax for "all users in a specified OU DN path"
body: <p>What is the search filter syntax for "all users under the given OU DN"? Looking at the docs here (<a href="https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx" rel="nofollow noreferrer">https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx</a>) did not seem to answer this question (though am totally new to AD, so may be here in another wording).</p>
  
  <p>Use case is that I have an AD path "OU=Users,OU=HortonworksUsers,DC=ucera,DC=local" under which there are several <code>person</code> entries (ie. thier attribute objectClass OID is "top;person;organizationalPerson;user"). I would like to add them to a search filter (for Apache Ranger <a href="https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.0.1/configuring-ranger-authe-with-unix-ldap-ad/content/ranger_ad_integration_ranger_usersync.html" rel="nofollow noreferrer">AD usersync</a>), but have only seen examples of filtering for a specified group, ie. "memberOf=".</p>
  
  <p>Can anyone with more AD experience let me know the right way to filter for users under some arbitrary OU DN?</p>