LDAP

#--> list of actual running requests - very useful!!
ldapsearch -s base -b cn=workers,cn=monitor -D cn=root -w pass objectclass=*

ldap samples:

get account status:
ldapsearch -h 10.10.10.10 -b dc=org,dc=com -D ... -s one -a never 'uid=mysuser' gecos pwdChangedTime pwdAccountLockedTime pwdExpirationWarned

Schema:
read out the schema:
ldapsearch -x -b cn=schema -s base objectclass=*


#synchronize directories
ldapdiff -b dc=org,dc=com -sh localhost -sp 389 -sD cn=root -sw xyz -ch ldap2 -cp 389 -cD cn=root -cw ? -v -a -F

computer2know :: thank you for your visit :: have a nice day :: © 2018