samba - Nov 2017 - Best practice for creating an RO LDAP User in AD...

On Thu, 9 Nov 2017 11:08:26 +0100
Marco Gaiarin via samba <samba at lists.samba.org> wrote:
> Mandi! L.P.H. van Belle via samba
>   In chel di` si favelave...
> 
> > I dont beleave it. 
> 
> Eh. «De gustibus non disputandum est». ;-)
> 
> 
> > The setup for the Ad in the link below is the same but if you want
> > access without auth, Have you tried to query the GC ports. ( 3268
> > or 3269 ) 
> 
> No, but now yes and does not work:
> 
>  gaio at albus:~$ ldapsearch -x -H ldap://vdcsv1:3268/ -b
> DC=ad,DC=fvg,DC=lnf,DC=it "(uid=gaio)" 
Try:

ldbsearch -H ldap://vdcsv1:3268 -P -b DC=ad,DC=fvg,DC=lnf,DC=it
'(uid=gaio)'

You will have to do this as root.

Rowland

Mandi! Rowland Penny via samba
  In chel di` si favelave...
> >  gaio at albus:~$ ldapsearch -x -H ldap://vdcsv1:3268/ -b
DC=ad,DC=fvg,DC=lnf,DC=it "(uid=gaio)"
> Try:
> ldbsearch -H ldap://vdcsv1:3268 -P -b DC=ad,DC=fvg,DC=lnf,DC=it
'(uid=gaio)'
Ahem, i need to access with LDAP, eg libldap-linked apps (think about
the php-ldap module), not with ldbsearch/console....

(i was simply using ldapsearch because is the simplieast libldap apps
 available...)

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

On Fri, 10 Nov 2017 14:43:08 +0100
Marco Gaiarin via samba <samba at lists.samba.org> wrote:
> Mandi! Rowland Penny via samba
>   In chel di` si favelave...
> 
> > >  gaio at albus:~$ ldapsearch -x -H ldap://vdcsv1:3268/ -b
> > > DC=ad,DC=fvg,DC=lnf,DC=it "(uid=gaio)" 
> 
> > Try:
> > ldbsearch -H ldap://vdcsv1:3268 -P -b DC=ad,DC=fvg,DC=lnf,DC=it
> > '(uid=gaio)'
> 
> Ahem, i need to access with LDAP, eg libldap-linked apps (think about
> the php-ldap module), not with ldbsearch/console....
> 
> (i was simply using ldapsearch because is the simplieast libldap apps
>  available...)
> 
I think you need to explain just what you are trying to script with
PHP ?

Rowland