Monthly Archives: June 2009


LDAP from command line

Using LDAP from command line can be quite man (or info) expensive. Usually LDAP is used for samba authentication, so it is set up something like this: domain example.com is described in LDAP as base dn: "dc=example,dc=com" also two OU-s are usually present: ou=groups for all groups and ou=users for all users. All this is case insensitive. Selecting all groups from LDAP is done using ldapsearch. ldapsearch -x -b "ou=groups,dc=example,dc=com" -h LDAP_host This lists all groups.