Eureka moment?
Is your scope looking at subtree? my LDAP tree has a base of ou=People,dc=redacted,dc=name but the users are buried under different branches under that like ou=Branch,ou=People,dc=redacted,dc=name and a full user in my case would be uid=bennabiy,ou=Branch,ou=People,dc=redacted,dc=name does that help? I know on a command line search, I would specify -s sub "objectclass=inetOrgPerson" > Thu Oct 05 2017 01:45:28 PM EDT from bennabiy @ Uncensored Subject: Re: >update? > > > >All I show is the top line, >> >> >> >> >>Oct 5 17:43:48 cit citserver[71341]: ldap: populating Citadel user >>database from LDAP > > >repeatedly, in either syslog, daemon.log etc. Unless it is being written to >a log I know not. It is not writing to debug. > > >> Thu Oct 05 2017 01:05:27 PM EDT from IGnatius T Foobar @ Uncensored >>Subject: Re: update? >> >> Oops, sorry. Your post says "no listing of email addresses yet." We're >>not yet breaking out the email addresses; I just wanted to make sure we're >>catching the correct accounts. For example, my output looks like this: >>itserver[22787]: ldap: populating Citadel user database from LDAP >>citserver[22787]: ldap: bind DN: CN=ldap,CN=Users,DC=example,DC=com >>citserver[22787]: ldap: search: >>(&(objectClass=user)(objectClass=person)(!(objectClass=computer))) >>citserver[22787]: ldap: 9 entries returned >>citserver[22787]: ldap: found CN=Administrator,CN=Users,DC=example,DC=com >>citserver[22787]: ldap: found CN=Guest,CN=Users,DC=example,DC=com >>citserver[22787]: ldap: found CN=krbtgt,CN=Users,DC=example,DC=com >>citserver[22787]: ldap: found CN=IGnatius T >>Foobar,CN=Users,DC=example,DC=com >>citserver[22787]: ldap: found CN=ldap,CN=Users,DC=example,DC=com >>citserver[22787]: ldap: found CN=Friko >>Mumjiboolean,CN=Users,DC=example,DC=com >>citserver[22787]: ldap: found CN=Egg Roll,CN=Users,DC=example,DC=com >>citserver[22787]: ldap: found CN=Phluphphy,CN=Users,DC=example,DC=com >>citserver[22787]: ldap: found CN=Abraham Lincoln,CN=Users,DC=example,DC=com >> >> >>That's all we're looking for. This will happen at startup and then every >>minute (obviously we' >>ll back this down to a less frequent interval in production). >> >>Your search string should show as "(objectClass=inetOrgPerson)". If this >>doesn't produce your list of users, we have to come up with the correct query >>to do so. >> >> >> >> > > > > > > >
