Querying Windows Active Directory server using ldapsearch from command line

Active DirectoryLdapOpenldap

Active Directory Problem Overview


Can anyone let me know if querying Active Directory server using ldapsearch, ldapadd, ldapdelete, etc. utilities is possible or not?

Active Directory Solutions


Solution 1 - Active Directory

The short answer is "yes". A sample ldapsearch command to query an Active Directory server is:

ldapsearch \
    -x -h ldapserver.mydomain.com \
    -D "[email protected]" \
    -W \
    -b "cn=users,dc=mydomain,dc=com" \
    -s sub "(cn=*)" cn mail sn

This would connect to an AD server at hostname ldapserver.mydomain.com as user [email protected], prompt for the password on the command line and show name and email details for users in the cn=users,dc=mydomain,dc=com subtree.

See Managing LDAP from the Command Line on Linux for more samples. See LDAP Query Basics for Microsoft Exchange documentation for samples using LDAP queries with Active Directory.

Solution 2 - Active Directory

You could query an LDAP server from the command line with ldap-utils: ldapsearch, ldapadd, ldapmodify

Attributions

All content for this solution is sourced from the original question on Stackoverflow.

The content on this page is licensed under the Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) license.

Content TypeOriginal AuthorOriginal Content on Stackoverflow
QuestionShriramView Question on Stackoverflow
Solution 1 - Active DirectoryRichard NeishView Answer on Stackoverflow
Solution 2 - Active DirectoryAnandView Answer on Stackoverflow