LinuxCommandLibrary

ldapsearch

queries LDAP directories

TLDR

Search for user

$ ldapsearch -x -H ldap://[server] -b "[dc=example,dc=com]" "(uid=[username])"
copy
Search with authentication
$ ldapsearch -x -D "[cn=admin,dc=example,dc=com]" -W -b "[dc=example,dc=com]" "(objectClass=*)"
copy
Return specific attributes
$ ldapsearch -x -b "[dc=example,dc=com]" "(uid=[user])" cn mail
copy
Search with TLS
$ ldapsearch -x -ZZ -H ldap://[server] -b "[base]" "[filter]"
copy
Output in LDIF format
$ ldapsearch -x -b "[base]" -LLL "(uid=[user])"
copy

SYNOPSIS

ldapsearch [options] [filter] [attrs...]

DESCRIPTION

ldapsearch queries LDAP directories. It connects to an LDAP server, performs searches based on filters, and returns matching entries.
The tool is essential for directory administration, user lookup, and debugging LDAP configurations.

PARAMETERS

-x

Simple authentication.
-H uri
LDAP server URI.
-b dn
Search base DN.
-D dn
Bind DN.
-W
Prompt for password.
-w pass
Bind password.
-s scope
Search scope (base, one, sub).
-Z
Start TLS.
-ZZ
Require TLS.
-L
LDIF output format.
-LL
No comments in output.
-LLL
No comments or version.

CAVEATS

Filter syntax must be correct. Base DN must match directory structure. Credentials needed for many operations. TLS recommended for security.

HISTORY

ldapsearch is part of OpenLDAP, which began in 1998 as an open source LDAP implementation. The LDAP protocol itself emerged from X.500 directory services in the early 1990s.

SEE ALSO

> TERMINAL_GEAR

Curated for the Linux community

Copied to clipboard

> TERMINAL_GEAR

Curated for the Linux community