ldapsearch

queries LDAP directories

TLDR

Search for user

$ ldapsearch -x -H ldap://[server] -b "[dc=example,dc=com]" "(uid=[username])"

Search with authentication

$ ldapsearch -x -D "[cn=admin,dc=example,dc=com]" -W -b "[dc=example,dc=com]" "(objectClass=*)"

Return specific attributes

$ ldapsearch -x -b "[dc=example,dc=com]" "(uid=[user])" cn mail

Search with TLS

$ ldapsearch -x -ZZ -H ldap://[server] -b "[base]" "[filter]"

Output in LDIF format

$ ldapsearch -x -b "[base]" -LLL "(uid=[user])"

SYNOPSIS

ldapsearch [options] [filter] [attrs...]

ldapsearch queries LDAP directories. It connects to an LDAP server, performs searches based on filters, and returns matching entries.The tool is essential for directory administration, user lookup, and debugging LDAP configurations.

PARAMETERS

-x

Simple authentication.

-H uri

LDAP server URI.

-b dn

Search base DN.

-D dn

Bind DN.

-W

Prompt for password.

-w pass

Bind password.

-s scope

Search scope (base, one, sub).

-Z

Start TLS.

-ZZ

Require TLS.

-L

LDIF output format.

-LL

No comments in output.

-LLL

No comments or version.

INSTALL

sudo apt install ldap-utils

sudo dnf install openldap-clients

sudo apk add openldap-clients

CAVEATS

Filter syntax must be correct. Base DN must match directory structure. Credentials needed for many operations. TLS recommended for security.

HISTORY

ldapsearch is part of OpenLDAP, which began in 1998 as an open source LDAP implementation. The LDAP protocol itself emerged from X.500 directory services in the early 1990s.