The DLs should have nothing to do with it. The search you have is for contact objects and so it *should* find those.
Out of curiosity though, run dsquery by itself and pipe that to a file, then do the same with your query and get and try to ascertain what object it is choking on. I was wondering if maybe they were using a bad filter for the search in the backend but they are using objectcategory paired with objectclass which is the best generic filter you can get for contacts. Anyway, something I found interesting is dsget queries the object twice for each and every object. The first time it queries for objectclass and then I expect, once that class is shown to be correct it queries for the correct info. This is kind of poor as it causes a ton of additional traffic. Not that that should cause you to fail, but I do think it is was rather poor for MS to do it that way joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan HINCKLEY Sent: Sunday, December 12, 2004 5:47 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DSget Contacts in AD That is my suspicion, because the size issue happens with or without piping the output. My guess is that as it traverses the subtrees it hits one or two of the dist groups I have in there and fails. I could try moving the groups; will have to look at that option At 19:48 12/10/2004, you wrote: >Are you sure that it is choking on the amount? The first time that I >used dsquery | dsget, dsget user was choking because dsquery group >returned a group and dsget user wasn't able to handle having a group piped to it. > >-Andrew > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al >Sent: Friday, December 10, 2004 12:06 PM >To: [EMAIL PROTECTED] >Subject: RE: [ActiveDir] DSget Contacts in AD > >One thing that bothers me is that DSQUERY should have brought back all >the entries and you should have been able to use it as expected. I'm >trying to figure out why DSQUERY chokes on the amount. > > >Can you verify that it's the amount that's causing it to choke? Can >you run it without piping the results to dsget and see if you get the >same results? > >Al > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of joe >Sent: Friday, December 10, 2004 12:14 PM >To: [EMAIL PROTECTED] >Subject: RE: [ActiveDir] DSget Contacts in AD > >How about > >Command | grep ">" > >Or do you mean the dn: string prefixing the dn being returned? > >If the latter, you can have it returned distinguishedname as one of the >attributes and then use the command above but you will still get the >attribute labels. If you just want DN strings, you can use the -dsq >option but you won't get attributes output at all then. > > joe > > > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Dan HINCKLEY >Sent: Friday, December 10, 2004 10:14 AM >To: [EMAIL PROTECTED] >Subject: RE: [ActiveDir] DSget Contacts in AD > >Any way to exclude the DN from the output? > >At 15:44 12/10/2004, you wrote: > >C:\>adfind -b ou=companies,dc=domain,dc=com -f > >"(&(objectcategory=Person)(objectClass=contact > >))" cn createTimeStamp > > > >AdFind V01.17.00cpp Joe Richards ([EMAIL PROTECTED]) May 2004 > > > >Using server: wil-dc01.bbtnet.com > > > >dn:CN=Test User,CN=Users,DC=bbtnet,DC=com > > >createTimeStamp: 20041210144136.0Z > > >cn: Test User > > > > > >1 Objects returned > > > > > > > >Specifying the attribute list tells ADFIND to return those attributes >only. > >In your case, you'd use displayname, mail, and > >physicaldeliveryofficename for the attributes you want. > > > > > >Al > > > >-----Original Message----- > >From: [EMAIL PROTECTED] > >[mailto:[EMAIL PROTECTED] On Behalf Of Dan HINCKLEY > >Sent: Friday, December 10, 2004 9:27 AM > >To: [EMAIL PROTECTED] > >Subject: RE: [ActiveDir] DSget Contacts in AD > > > >I had it set to 500 because for any limit size above that (0, or > >1500, > >etc.) it fails with that error. > > > >I've read through the ADfind docs and must not be alert enough to see > >how to spec the attribs I want. How is it done? > > > >At 15:17 12/10/2004, you wrote: > > >You may misunderstand ADFIND. It will allow you to specify the > > >attribs you want vs. which one's you don't want last I checked. > > > > > >As for your DSQUERY command, why are you limiting to 1000 on the > > >one that doesn't work? Why not leave it at 0 ? > > > > > >Al > > > > > >-----Original Message----- > > >From: [EMAIL PROTECTED] > > >[mailto:[EMAIL PROTECTED] On Behalf Of Dan > > >HINCKLEY > > >Sent: Friday, December 10, 2004 8:16 AM > > >To: [EMAIL PROTECTED] > > >Subject: [ActiveDir] DSget Contacts in AD > > > > > >I find DSget works like a charm retrieving user info like this: > > > > > >dsquery user ou=companies,dc=domain,dc=com -limit 0 | dsget user > > >-display -email -office -acctexpires > d:\temp\dsquery.txt > > > > > >But when I try to retrieve more than about 500 contacts like this: > > > > > >dsquery contact ou=companies,dc=domain,dc=com -limit 1000 | dsget > > >contact -display -email -office > d:\temp\dsquerycontacts.txt > > > > > >I get this error: > > > > > >dsget failed:Value for `Target object for this command' has > > >incorrect > > > >format > > > > > >The Contacts folder has a series of subfolders and a few > > >distribution > > > >groups mixed in; might they cause this? > > > > > >ADfind doesn't seem to give me the option to specify which fields I > > >wnat to retrieve, only to exclude fields, and there are too many to > > >do > >that. > > > > > > > > >++++++++++++++++++++++++++++++++++++++++++++++++++++++++ > > >Dan Hinckley t: (41 22) 999 0183 > > >Information Management Group f: (41 22) 999 0010 > > >IUCN, The World Conservation Union e: [EMAIL PROTECTED] > > >1196 Gland, Switzerland w: http://iucn.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
