{
LdapDN suffixDn = new LdapDN( suffix );
suffixDn.normalize( atRegistry.getNormalizerMapping() );
LdapDN adminDn = new LdapDN( ServerDNConstants.ADMIN_SYSTEM_DN_NORMALIZED );
adminDn.normalize( registries.getAttributeTypeRegistry().getNormalizerMapping() );
CoreSession adminSession = new DefaultCoreSession(
new LdapPrincipal( adminDn, AuthenticationLevel.STRONG ), directoryService );
EntryFilteringCursor subentries = nexus.search( new SearchOperationContext( adminSession,
suffixDn, AliasDerefMode.NEVER_DEREF_ALIASES, filter, controls ) );