[389-users] get base dn from ldapsearch

Aaron Hagopian airhead1 at gmail.com
Wed Nov 24 20:01:18 UTC 2010


Oddly enough it looks like it comes out as part of the LDIF comment.  If you
skip the option to tell it to not output ldif comments you'll get your base:

$ ldapsearch -d1 -x "(uid=example)" 2>&1 | grep base

# base <dc=example,dc=com> (default) with scope subtree



On Wed, Nov 24, 2010 at 3:58 AM, Gerrard Geldenhuis <
Gerrard.Geldenhuis at betfair.com> wrote:

> > -----Original Message-----
> > From: 389-users-bounces at lists.fedoraproject.org [mailto:389-users-
> > bounces at lists.fedoraproject.org] On Behalf Of Angel Bosch Mora
> > Sent: 24 November 2010 09:20
> > To: General discussion list for the 389 Directory server project.
> > Subject: Re: [389-users] get base dn from ldapsearch
> >
> > > Maybe I am understanding this wrong but could you not just check in
> > > the config what the search base is set to on the client side? What is
> > > the problem you are trying to solve?
> > >
> >
> > yes, you're right. i can just take a look at ldap.conf but there's
> several places
> > to look:
> >
> > - debian/ubuntu uses /etc/ldap/ldap.conf
> > - RHEL/CentOS uses /etc/openldap/ldap.conf
> > - custom compilations can use any path. ex: /usr/local/ldap/ldap.conf
> > - windows openldap uses... i don't really know :P
> >
> > so what im trying to do is resolving configured base without knowing
> > anything about the client.
> >
> > for example, this command gives me the server even if i dont know
> > anything about the conf:
> >
> > ldapsearch -d1 -x -LLL "(uid=example)" uid 2>&1 | grep
> > ldap_connect_to_host
> >
> >
> > im just a little bit surprised that i can't find any debuglevel that
> gives me the
> > BASE
> >
> >
> Hmmm, that is a really interesting problem. I could not find any solution
> to it either.
>
> <rant>
> from the man page
> -d debuglevel
>              Set the LDAP debugging level to debuglevel.  ldapsearch must
> be compiled with LDAP_DEBUG defined for this option to have any effect.
>
> that is just bloody useless, why do I have to google to find a sun man page
> that contains the actual possible debug levels. Why is it not part of the
> man page in Red Hat / CentOS ?!!?!?!?!
>
> Lets get rid of man pages save some disk space and find everything with
> google, who reads man pages anyway.
> </rant>
>
> Regards
>
>
> ________________________________________________________________________
> In order to protect our email recipients, Betfair Group use SkyScan from
> MessageLabs to scan all Incoming and Outgoing mail for viruses.
>
> ________________________________________________________________________
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20101124/758eaf87/attachment.html>


More information about the 389-users mailing list