RE: [ActiveDir] LDAP search string.

[joe]

If you want a list of all users in that group, query for the group and return the member attribute. If it is possible someone used that group for a primary group then you have to go a step further. If you have to handle group nesting you will have to do more than a simple LDAP query.      joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Hogenauer Sent: Wednesday, November 16, 2005 1:45 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] LDAP search string. Ok So I changed the port but it still pulls back the same info all related to the account snvbug. I was hoping to get a list of members of the group bugz101.   dn: CN=snvbug,CN=Users,DC=opsware,DC=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: snvbug givenName: snvbug distinguishedName: CN=snvbug,CN=Users,DC=opsware,DC=com instanceType: 4 whenCreated: 20051116162449.0Z whenChanged: 20051116172242.0Z displayName: snvbug uSNCreated: 1657770 memberOf: CN=bugz101,CN=Users,DC=opsware,DC=com uSNChanged: 1659527 name: snvbug objectGUID:: gbZWZ+4yckewq8dCkrkBFg== userAccountControl: 66048 badPwdCount: 0 codePage: 0 countryCode: 0 badPasswordTime: 127766401222018909 lastLogoff: 0 lastLogon: 127766401346237659 pwdLastSet: 127766319749346878 primaryGroupID: 513 objectSid:: AQUAAAAAAAUVAAAA+/wD/n6lJum0kYZLvmYAAA== accountExpires: 9223372036854775807 logonCount: 0 sAMAccountName: snvbug sAMAccountType: 805306368 userPrincipalName: [EMAIL PROTECTED] objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=opsware,DC=com dSCorePropagationData: 20051116172242.0Z dSCorePropagationData: 20051116172242.0Z dSCorePropagationData: 20051116172242.0Z dSCorePropagationData: 20051116171656.0Z dSCorePropagationData: 16010108151056.0Z lastLogonTimestamp: 127766343852388433   # search result search: 2 result: 0 Success       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of TIROA YANN Sent: Wednesday, November 16, 2005 10:20 AM To: ActiveDir@mail.activedir.org Subject: RE : [ActiveDir] LDAP search string.   Hi,   The memebrof attribute is not replicated to the global catalog (port 3268), so you did not find it at all.   Change the GC port (3268) to DC port (389). So just modify your request as followed ldapsearch -v -h $SERVER:389 -D "CN=snvbug,CN=Users,DC=opsware,DC=com" -x -W -b "CN=Users,DC=opsware,DC=com" "(memberOf=CN=bugz101,CN=Users,DC=opsware,DC=com)"     Yann De: [EMAIL PROTECTED] de la part de Mike Hogenauer Date: mer. 16/11/2005 18:59 À: ActiveDir@mail.activedir.org Objet : [ActiveDir] LDAP search string. All,   I’m trying to get an instance of Bugzilla to authenticate against AD. (Windows 2003 native domain) I’ve created and account called: snvbug and put it in the default user’s container for simplicity. I’ve also created a group called bugz101 and placed the users who I want to have access to bugzilla in that group.   My search now looks like this:   ldapsearch -v -h $SERVER:3268 -D "CN=snvbug,CN=Users,DC=opsware,DC=com" -x -W -b "CN=Users,DC=opsware,DC=com" "(memberOf=CN=bugz101,CN=Users,DC=opsware,DC=com)"   I’m still not able to pull back and group membership info. Is my search string wrong? I’ve followed the instructions in the link below from a bugzilla newsgroup and still no luck?!?!   Any help is GREATLY appreciated.   Related link: http://groups.google.com.au/group/netscape.public.mozilla.webtools/msg/b60eedc3602a222a?hl=en   Thanks, Mike