Finger-ldap displays information about system users, by calling the bsd finger command. however, it works around a gross inefficiency of bsd finger's full-name matching algorithm by exploiting the ldap search filter mechanism, outlined in rfc 2254.