656 questions
0
votes
1
answer
69
views
LDAP Query for Group Membership Does Not Return Global Security Groups
I'm trying to setup Grafana for AD integration. Grafana works by querying for all groups a user is a member of to find a matching group that is mapped to a role in Grafana. Below is my heirarchy
...
- 93
-1
votes
0
answers
48
views
LDAP API Query LIKE Operator to pull the list of DLs
I was able to connect to the LDAP API but unfortunately i was not able to use the like operator. I need to pull the list of DL's (Distribution lists) that are in the domain EXCHAD and when I specified ...
- 1
4
votes
1
answer
84
views
Do special characters in LDAP Search escaped by \XX have to be sent in binary form in the wire format?
I am trying to send LDAP Search queries from PL/SQL (OracleDB using DBMS_LDAP.search_s) towards Active Directory for the field objectGUID.
Because that is a binary field, and I need to query non-ASCII ...
- 43
0
votes
1
answer
311
views
Query msDS-User-Account-Control-Computed with PowerShell built-in tools/modules
I want to query the msDS-User-Account-Control-Computed attribute of an Active Directory user account by using PowerShell with built-in tools/modules. That means I cannot use cmdlets like Get-ADUser. I ...
- 14.3k
0
votes
0
answers
33
views
What's the ldap query for ldapsearch to fetch MinPwdLen attribute from windows adserver?
How can the query be found to get the value of attributes like MinPwdLen, MinPwdAge, etc., from a Windows AD server? I got the distinguished name for this attribute from JXplorer, but I'm unable to ...
- 1
0
votes
0
answers
39
views
How to escape ( when I query the MS AD LDAP
Here is my code:
import ldap from 'ldapjs';
import fs from "fs";
import dotenvFlow from 'dotenv-flow';
dotenvFlow.config();
let config = {
baseDN: ..........,
groupDN: ........,
...
- 3,852
0
votes
1
answer
204
views
Retrieve more than 1000 records in LDAP using springboot
I'm using ldaptemplate to retrieve many records from Active Directory using sring-ldap-core 3.2.
This is the code I'm using
AndFilter filter = new AndFilter();
filter.and(new EqualsFilter(&...
- 71
1
vote
1
answer
181
views
How to Fetch All Users from AD LDAP in Laravel Without Timeout or Memory Issues?
I’m currently working on a Laravel 10 application that integrates with Active Directory (AD) using the AdLdap2 package and PHP's LDAP functions (PHP 8). However, I’m facing challenges when trying to ...
- 65
0
votes
3
answers
218
views
Ldap filter not working for filtering out OU
I am looking to filter out an OU. For example, I would like to filter out OU=Designers
OU=Designers,OU=Employees,DC=company,DC=com
I am using this ldap filter,
(&(objectCategory=person)(...
1
vote
1
answer
114
views
Is there a way to get multiple entries by dn using a single ldap call?
I have a code like this:
List<String> dns = ...
List<Entry> entries = new ArrayList<>()
for(dn: dns)
entries.add(connection.getEntry())
I don't like this code because it makes n ...
- 36.9k
0
votes
0
answers
198
views
How to retrieve the schema version of LDAP server with ldapsearch?
Is it possible to retrieve such a property by querying, say, the Root DSE or the schema? I read that the objectVersion property has this information (see https://blog.netwrix.com/2023/04/06/get-...
- 1
1
vote
0
answers
143
views
OR in LDAP filter not working as expected
I'm using Authentik's LDAP provider and am trying to create a filter which returns both users and groups. This lead me to the following filter:
(|(objectClass=posixAccount)(objectClass=posixGroup))
...
- 11
0
votes
0
answers
168
views
How to list All LDAP Groups using PowerShell
I'm Brand new to LDAP Directory related works and seeking your help in fetching all Available LDAP Groups using PowerShell script.
LDAP Server: xxxx.domain.com:636 and have one service account.
Here ...
0
votes
1
answer
199
views
sssd adjust ldap_search_ext
is possible to adjust the used filters in the ldap search query in the sssd.conf?
Background:
I/We want to implement ldap authentication with sssd. Our sssd looks like:
[sssd]
config_file_version = 2
...
- 1,207
0
votes
1
answer
44
views
get all entries that do not have a specific child entry
I have this ldap scheme.
dc=company, dc=com
- ou=users
- uid=aaaa
- ou=car
- brand=audi
- brand=chevrolet
- uid=bbbb
...
- 827
0
votes
0
answers
277
views
Query for disabled users in an AD LDS environment
I'm running into an odd issue and can't find any information. I am trying to figure out why queries to return disabled users aren't working and return a value of 0 entries.
The following queries work ...
- 426
0
votes
1
answer
423
views
PHP Secure LDAP / LDAPS to Azure Active Directory via Microsoft Entra Domain Services
I've got Secure LDAP / LDAPS enabled to Azure Active Directory using Microsoft Entra Domain Services. This is working great in an application I have so I know it's enabled and working fine.
I'm now ...
- 1,955
2
votes
1
answer
127
views
Combining LDAP Queries is not giving proper results
Good afternoon folks.
I am trying to run an LDAP query against a Domain Controller to include servers with the following requirements:
OperatingSystem=*server* (To include all Servers)
OR
...
2
votes
1
answer
130
views
How to add the AD group pemission to access file(shared path access) using ldap3 or any other python library?
I want to share the example of manual efforts here.
I have already created a users and ad groups by having ldap connection binding using ldap3.
I can see ldap3 supports automation for use cases like ...
- 62
0
votes
1
answer
850
views
Add Attributes and objectClasses to OpenLDAP server over LDAP using .ldif file
As the titles is worded:
I am looking for a way to run an ldapmodify / ldapadd command with bash and by said command it will run an .ldif file and it shall modify the schema of the server.
I have ...
- 1
0
votes
1
answer
59
views
What is the "query" in Virtual List View control specification?
I am reading Virtual List View control specification
and there is the phrase
contextID values have no validity outside the connection and query
with which they were received. A client MUST ...
- 36.9k
0
votes
2
answers
776
views
How to search in LDAP for group users?
We have a group: "MyTest" in
OU=Domain_users,DС=my,DС=test
We try to find users in this group, trying:
(&(|(sAMAccountName=*$str*)(givenName=*$str*)(sn=*$str*)(middlename=*$str*))(...
- 11
1
vote
1
answer
77
views
Does changing the order of elements affect -Filter performance?
Say I am querying Active Directory with Get-ADUser -Filter "ObjectClass -eq 'user' -and 'Name -like '*foo*'".
Does reversing the order of ObjectClass and Name change the order of the query ...
- 138
0
votes
1
answer
2k
views
LDAP query for checking group membership using C#
Having an ldapConnection established, I want to check if a given user is a member of a group given by name (note: I mean the "user frielndly" name, not a DN).
I've been experimenting with ...
- 2,290
0
votes
0
answers
181
views
How to use proxy server while authenticate using LDAP in Spring Boot?
How to set proxy server ip in LdapContextSource while authenticated using LdapTemplate.authenticate()
Actually for security purposes we don't have direct access to AD server. So how to set proxy IP ...
0
votes
1
answer
2k
views
Struggling with LDAP query base DN vs filter
I'm trying to pull out a list of users from Active Directory with LDAP. I want to get all users from multiple OUs and I'm struggling to get results.
In an attempt to simplify things, I tried setting a ...
- 148
1
vote
1
answer
240
views
PowerShell DirectorySearcher returns some data and then errors with "More data is available" -- how Can I get the more data?
I am using PowerShell to find all users that have direct reports. The query seems to work in that it returns some data, but then it errors with a message.
How can I get the rest of the data?
$...
- 5,933
0
votes
1
answer
566
views
Spring LDAP filter search on a multivalued attribute
I am using Spring LDAP and have entries (person) with a multivalued attribute named Department. i.e each person can have zero or more Department attributes.
I am trying to make a search (filter) and ...
- 103
0
votes
0
answers
1k
views
Powershell AD-GetUser fails if port 636 is used, but DirectorySearcher works
I have a PowerShell script to get users from my Active Directory server hosted inside VirtualBox.
I've imported the root certificate into my computer's trusted root store. I can connect and query my ...
- 2,509
3
votes
1
answer
1k
views
How to retrieve all groups of a specific user in LDAP? using Novell.Directory.Ldap
I am trying to retrieve all groups assigned to a user in LDAP Apache Directory Studio. I am using Novell.Directory.Ldap library and used .NET Core. I am not sure if I'm doing the correct one but, I ...
- 113
1
vote
1
answer
1k
views
In OpenLDAP (Slapd), how do I give users permission to search which groups they're a member of?
Currently, only my admin user is allowed to search what group a particular user is in.
If I have the following user:
dn: uid=tester,ou=people,dc=example,dc=com
cn: tester
displayName: tester
...
0
votes
1
answer
1k
views
Query LDAP groups in Spring via LDAPTemplate - Authorization needed and how?
I'm in the process of developing a Spring Boot application that can be connected to an LDAP server for authentication and some (limited) query purposes.
By now, authentication and my needed query ...
0
votes
1
answer
1k
views
FreeIPA LDAPSearch for group membership
Freeipa 4.9.10
Rocky 8.7
LdapSearch 2.4.46
I am trying to get the list of user's uid that belongs to specific group. Then ultimately get the email address of those users.
ldapsearch -x -H ldap://10.0....
- 21
1
vote
1
answer
147
views
How to only get a slice of the results of a LDAP query?
Given a LDAP query, is there a generic way to get a slice of the query results? For instance if I just want the items 5000 to 5999 of the query and I am just not interested in reading the first 4999 ...
- 4,674
0
votes
1
answer
241
views
Is there any way to roll back execution of delete method with ldap3
I'm using Django 4.1 and ldap3 to connect directory service using ldap. Is there any way to roll back execution of delete method?
the sample code likes below:
# import class and constants
from ldap3 ...
-1
votes
1
answer
603
views
ldap search_filter escape specific charter [duplicate]
I retrieve members of a group and their sAMAccountName (NT Accounts) I run the following code takes from: ldap3 python search members of a group and retrieve their sAMAcountName (Active Directory)
I'm ...
- 1
0
votes
1
answer
1k
views
LDAP Query - Include/Exclude Groups
Trying to amend a rule to exclude certain group from my existing functioning query...
When i add the extra section to exclude, groupC, it picks up no users.
(&
(objectclass=user)
(&
...
0
votes
1
answer
944
views
How do you get the Owner of a Computer in AD? (with .NET Core)
Trying to find who joined the computer to the domain. But in C# (.NET Core).
This is the exact answer (the question title is not worded well):
Powershell ADSI ntSecurityDescriptor
$Computer = [ADSI]((...
- 4,355
0
votes
1
answer
3k
views
How to resolve LDAP: error code 19 - pwdFailureTime: no user modification allowed for OPEN LDAP
While unlocking an account I am getting error message as :
LDAP: error code 19 - pwdFailureTime: no user modification allowed
Tried giving different values for the attribute 'pwdAccountlockedtime' on ...
0
votes
2
answers
3k
views
LDAP query to get list of members in an AD group
I checked a few posts asked the similar questions before, but none works for my case, not sure if something wrong on my side or it's the AD.
So I have security group at path:
CN=MigratedUsers,OU=Azure ...
- 1,078
0
votes
1
answer
1k
views
Ldap queries with multiple domains
I have question about LDAP queries and DC in general (in Microsoft AD):
Does a DC can contain only one domain? or sub domain can be also on it?
Does sub-domain reside in a separate DC?
if i want to ...
- 1
1
vote
1
answer
474
views
Is the searchFilter specified with my ADLdapAuthenticationProvider correct for my Active Directory structure?
In my Active directory DC, I have a user named "Demo User" inside the OU "Special Users" of the domain "myCompany.co.hk".
I'm using Spring Security's ...
- 53
1
vote
1
answer
3k
views
Using powershell to pull active users email address that belong to a certain group and are active
I am trying to use Powershell to pull All members of a Active Directory group who are currently active (both account is enabled and not expired).
I thought what I had worked but I noticed that some ...
0
votes
1
answer
518
views
LDAP Search attribute with multiple occurence
i am looking for a ldap filter to find users who have an multi value attribute with duplicate values.
For example in this case i will find the users with duplicate {PersNumber}:
MVAttribute {...
0
votes
1
answer
200
views
LDAP Filter Syntax Query
What would be the syntax for LDAP for the below scenario:
Where sAMAccountName = GRA-* without $. I want the records which are highlighted in green.
This is my current LADP Filter for your reference:
...
0
votes
0
answers
269
views
invalid credentials LDAP Symfony 6.*
i want to Authenticat against an LDAP server , i managed to connect with the ldap server and also i managed to bind with the ldap user provider but i face a problem when i want to login
SERVICE.YAML
...
1
vote
1
answer
2k
views
LDAP query to retrieve users from a specific group
I am trying to write a query to extract the users from an LDAP group. I tried several queries to retrieve the users from a specific group but none of them seem to have worked until now. For example, ...
- 83
0
votes
1
answer
1k
views
Query openldap password policy
Everything work great, I am able to query hosted() openldap but I am not able to fetch some attribute like pwdExpireWarning, pwdMinLength, pwdInHistory, pwdExpireWarning.
first I fetch the policy ...
- 1
0
votes
1
answer
2k
views
ldapsearch for entire ad forest
In my AD forest i have one primary domain and three child domains.
Is there any way to query forest to search in all domains controllers to chek if user is memberof a group?
I already try ldap bind + ...
- 165
0
votes
1
answer
15k
views
LDAP search filter for users with group membership in group name (but not whole path)
I did my research before asking this but it came to nothing :-(
I'm trying to create an LDAP filter. The goal is to get users (objectClass=person in this case) which are members of a specific group. ...
- 197