Ldapsearch - Revision history

Busk at 17:59, 28 December 2023

2023-12-28T17:59:45Z

Busk at 17:38, 28 December 2023

2023-12-28T17:38:33Z

Busk at 22:54, 12 May 2023

2023-05-12T22:54:58Z

Busk at 22:20, 20 April 2023

2023-04-20T22:20:02Z

Busk at 22:04, 20 April 2023

2023-04-20T22:04:31Z

Busk at 22:28, 26 September 2021

2021-09-26T22:28:52Z

Busk at 18:16, 31 August 2020

2020-08-31T18:16:05Z

Busk at 18:15, 31 August 2020

2020-08-31T18:15:24Z

Busk: Created page with "``` ldapsearch # the command itself -LLL # just a particular way to display the results -H ldap://wspace.mydomain.com # the URL where the LDAP server listens -x # use simp..."

2020-08-31T17:35:42Z

Created page with "``` ldapsearch # the command itself -LLL # just a particular way to display the results -H ldap://wspace.mydomain.com # the URL where the LDAP server listens -x # use simp..."

New page

```
ldapsearch # the command itself
-LLL # just a particular way to display the results
-H ldap://wspace.mydomain.com # the URL where the LDAP server listens
-x # use simple authentication, not SASL
-D 'WSPACE\ENUMuser' # the account to use to authenticate to LDAP
-w 'ENUMpass' # the password that goes with the account on the previous line
-E pr=1000/noprompt # ask the server for all pages, don't stop after one
-b 'ou=mydomain,dc=wspace,dc=mydomain,dc=com' # the base of the search. We don't want results from e.g. 'ou=blah,dc=wspace,dc=mydomain,dc=com'
'(&(objectClass=person)(uidNumber=*))' # Ask for any entry that has attributes objectClass=person and uidNumber has a value
SAMAccountName uid uidNumber # Show only these attributes

List the bulk of machines:

ldapsearch -LLL -H ldap://wspace.mydomain.com -x -D 'WSPACE\ENUMuser' -w 'ENUMpass' -E pr=1000/noprompt -b 'ou=computers,ou=mydomain,dc=wspace,dc=mydomain,dc=com' name|grep ^name:

... list a few more:

ldapsearch -LLL -H ldap://wspace.mydomain.com -x -D 'WSPACE\ENUMuser' -w 'ENUMpass' -b 'cn=computers,dc=wspace,dc=mydomain,dc=com'

... and yet more:

ldapsearch -LLL -H ldap://wspace.mydomain.com -x -D 'WSPACE\ENUMuser' -w 'ENUMpass' -b 'ou=extra workstations,ou=computers,ou=mydomain,dc=wspace,dc=mydomain,dc=com'

Troubleshooting```

← Older revision		Revision as of 17:59, 28 December 2023
Line 2:		Line 2:

	https://www.digitalocean.com/community/tutorials/how-to-manage-and-use-ldap-servers-with-openldap-utilities		https://www.digitalocean.com/community/tutorials/how-to-manage-and-use-ldap-servers-with-openldap-utilities
		+
		+	https://stackoverflow.com/questions/76458109/in-openldap-slapd-how-do-i-give-users-permission-to-search-which-groups-they

	# Non-auth Query		# Non-auth Query

← Older revision		Revision as of 17:38, 28 December 2023
Line 1:		Line 1:
	# Simple auth check with bash		# Simple auth check with bash
		+
		+	https://www.digitalocean.com/community/tutorials/how-to-manage-and-use-ldap-servers-with-openldap-utilities

	# Non-auth Query		# Non-auth Query

← Older revision		Revision as of 22:54, 12 May 2023
Line 1:		Line 1:
	# Simple auth check with bash		# Simple auth check with bash
		+
		+	# Non-auth Query
		+	```
		+	ldapsearch -x uid=foo -H ldap://ldap.example.com:389
		+	```
		+
		+	# Auth Query
		+	```
		+	uri="ldap://ldap.example.com:389"
		+	userdn="uid=foo,cn=users,cn=accounts,dc=example,dc=com"
		+	password="bar"
		+	base="cn=users,cn=accounts,dc=example,dc=com"
		+
		+	ldapsearch -x -LLL -H $uri -D $userdn -w $password -b $base -s sub -s sub '(objectClass=)' 'givenName=username'
		+	```
		+
		+

	https://serverfault.com/questions/514870/how-do-i-authenticate-with-ldap-via-the-command-line		https://serverfault.com/questions/514870/how-do-i-authenticate-with-ldap-via-the-command-line

@@ Line 1: / Line 1: @@
 # Simple auth check with bash
 ```
 ldapsearch -x -D "uid=user,ou=People,dc=example,dc=com" \

← Older revision		Revision as of 22:04, 20 April 2023
Line 1:		Line 1:
		+	# Simple auth check with bash
		+	```
		+	ldapsearch -x -D "uid=user,ou=People,dc=example,dc=com" \
		+	-W -H ldap://ldap.example.com -b "ou=People,dc=example,dc=com" \
		+	-s sub 'uid=user'
		+	```
		+
	```		```
	ldapsearch -xLLL -H ldaps://ldaps.example.com:636 -D "DOMAIN\\myuser" -W -b "DC=example,DC=com" -s sub "(&(objectclass=user)(memberOf=Domain U		ldapsearch -xLLL -H ldaps://ldaps.example.com:636 -D "DOMAIN\\myuser" -W -b "DC=example,DC=com" -s sub "(&(objectclass=user)(memberOf=Domain U

← Older revision		Revision as of 22:28, 26 September 2021
Line 1:		Line 1:
		+	```
		+	ldapsearch -xLLL -H ldaps://ldaps.example.com:636 -D "DOMAIN\\myuser" -W -b "DC=example,DC=com" -s sub "(&(objectclass=user)(memberOf=Domain U
		+	sers))" sAMAccountName
		+	```
		+
	```		```
	ldapsearch # the command itself		ldapsearch # the command itself

@@ Line 29: / Line 29: @@
 More
 ```
-ldapsearch -H ldaps://wjv-dc03.extendhealth.com -x -W -D "jebusk@extendhealth.com" -b "dc=extendhealth,dc=com" 'objectClass=computer' name
+ldapsearch -H ldaps://ad.example.com -x -W -D "myuser@example.com" -b "dc=example,dc=com" 'objectClass=computer' name
 ```

← Older revision		Revision as of 18:15, 31 August 2020
Line 25:		Line 25:


−	~~Troubleshooting~~```	+	```
		+
		+	More
		+	```
		+	ldapsearch -H ldaps://wjv-dc03.extendhealth.com -x -W -D "jebusk@extendhealth.com" -b "dc=extendhealth,dc=com" 'objectClass=computer' name
		+	```