Matt Ross wrote: >I am using the Netscape LDAP SDK (v4.1) ldapsearch utility to export some >users from a Novell eDirectory (8.6.2): > >$ ldapsearch -b "" -h myserver -p 636 -Z -P /usr/local/ssl/certs/cert7.db -s >sub -D "cn=admin,o=is" -W admin_password_here "objectClass=posixAccount" "*" > >However, it does not display all the attributes. Some that are missing are: >groupMembership, securityEquals, loginTime > Are these attributes operational? If so, you must ask for them explicitly on the command line: ...
"objectClass=posixAccount" "*" groupMembership securityEquals loginTime >Now if I use the LDAP Browser/Editor 2.8.2 it lists all the attributes as I >would expect. > It may "know" about operational attributes, either by hard coding them or by reading the schema. >It is using the same "cn=admin,o=is" account to authenticate >so I'm guessing I'm not using ldapsearch correctly. > >Does anyone know what I'm doing wrong? > >Thanks, > >-- > >Matt Ross >Please remove all underscore characters from my e-mail address. > > > >
