ldapsearch:tldr:35cc3

ldapsearch: Return all items that are part of multiple groups, returning the display name for each item.

ldapsearch

$ ldapsearch -D '${admin_DN}' -w '${password}' -h ${ldap_host} '(&(${memberOf=group1})(${memberOf=group2})(${memberOf=group3}))' "displayName"

try on your machine

The command ldapsearch is used to search for and retrieve information from an LDAP (Lightweight Directory Access Protocol) server. Here is the breakdown of the provided command:

ldapsearch: This is the command to initiate the LDAP search.
-D '${admin_DN}': The -D option specifies the distinguished name (DN) of the LDAP user who will authenticate the search. ${admin_DN} is a placeholder for the actual DN value.
-w '${password}': The -w option is used to provide the password for the LDAP user specified with -D. ${password} is a placeholder for the actual password value.
-h ${ldap_host}: The -h option specifies the hostname or IP address of the LDAP server to connect to. ${ldap_host} is a placeholder for the actual host value.
'(&(${memberOf=group1})(${memberOf=group2})(${memberOf=group3}))': This is the search filter that determines the entries matching certain criteria. In this case, the filter is looking for entries that are members of group1, group2, and group3. The & operator signifies an AND operation between the three conditions.
"displayName": This specifies the attribute(s) of the matching entries to retrieve. In this case, it is requesting the displayName attribute.

Overall, the command is searching the LDAP server for entries that are members of group1, group2, and group3, and it retrieves the value of the displayName attribute for those entries. The authentication is performed using the provided admin DN and password.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.

back to the ldapsearch tool