Can anyone let me know if querying Active Directory server using ldapsearch, ldapadd, ldapdelete, etc. utilities is possible or not?
2 Answers
The short answer is "yes". A sample ldapsearch
command to query an Active Directory server is:
ldapsearch \
-x -h ldapserver.mydomain.example \
-D "mywindowsuser@mydomain.example" \
-W \
-b "cn=users,dc=mydomain,dc=com" \
-s sub "(cn=*)" cn mail sn
This would connect to an AD server at hostname ldapserver.mydomain.example
as user mywindowsuser@domain.example
, prompt for the password on the command line and show name and email details for users in the cn=users,dc=mydomain,dc=com
subtree.
See Managing LDAP from the Command Line on Linux for more samples. See LDAP Query Basics for Microsoft Exchange documentation for samples using LDAP queries with Active Directory.
-
1Saved my day! :D I had gotten a username (
api-user
) for an LDAP Active Directory without any@example.org
-part. The trick was to concatenate the CNs -- e.g.CN=edu,CN=school,CN=com
becomes@edu.school.com
givingapi-user@edu.school.com
– qffFeb 17, 2017 at 13:30 -
1The answer is nice, but as there are a lot of options for the command, something more extensive documentation is helpful. The link in the answer is not existing now, so I offer the Redhat documentation access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/…– zhristJul 10, 2018 at 9:18
You could query an LDAP server from the command line with ldap-utils: ldapsearch, ldapadd, ldapmodify