# Empty Search Base for LDAP/AD

**URL:** <https://forums.suse.com/t/empty-search-base-for-ldap-ad/12537>\
**Category:** General\
**Created:** [November 29, 2018, 11:21pm UTC](https://forums.suse.com/t/empty-search-base-for-ldap-ad/12537 "2018-11-29T23:21:14Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![blackwoodm](https://avatars.discourse-cdn.com/v4/letter/b/e9a140/32.png) [@blackwoodm](https://forums.suse.com/u/blackwoodm)\
**Post date:** [November 29, 2018, 11:21pm UTC](https://forums.suse.com/t/empty-search-base-for-ldap-ad/12537/1 "2018-11-29T23:21:14Z")

</div>

I’ll be the first to admit that our org has a weird AD system, but the only real way to do user searches is with the global catalog, which allows and uses an empty search base.

The current web UI doesn’t allow for empty search bases. In some other applications with less rigorous checks (looking at you graylog)we can just edit the setting page HTML or change the backing setting store, but it looks like Rancher is a bit smarter about user input (hooray!) and I’m not sure how to go about modifying the etcd storage.

Allowing an empty search base would really help with some stranger environments.