55

Can anyone let me know if querying Active Directory server using ldapsearch, ldapadd, ldapdelete, etc. utilities is possible or not?

2 Answers 2

117

The short answer is "yes". A sample ldapsearch command to query an Active Directory server is:

ldapsearch \
    -x -h ldapserver.mydomain.example \
    -D "mywindowsuser@mydomain.example" \
    -W \
    -b "cn=users,dc=mydomain,dc=com" \
    -s sub "(cn=*)" cn mail sn

This would connect to an AD server at hostname ldapserver.mydomain.example as user mywindowsuser@domain.example, prompt for the password on the command line and show name and email details for users in the cn=users,dc=mydomain,dc=com subtree.

See Managing LDAP from the Command Line on Linux for more samples. See LDAP Query Basics for Microsoft Exchange documentation for samples using LDAP queries with Active Directory.

2
  • 1
    Saved my day! :D I had gotten a username (api-user) for an LDAP Active Directory without any @example.org-part. The trick was to concatenate the CNs -- e.g. CN=edu,CN=school,CN=com becomes @edu.school.com giving api-user@edu.school.com
    – qff
    Feb 17, 2017 at 13:30
  • 1
    The answer is nice, but as there are a lot of options for the command, something more extensive documentation is helpful. The link in the answer is not existing now, so I offer the Redhat documentation access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/…
    – zhrist
    Jul 10, 2018 at 9:18
2

You could query an LDAP server from the command line with ldap-utils: ldapsearch, ldapadd, ldapmodify

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.