LDAP query help needed!

[TheMisio]

Fellow Techies,

Does anyone know why LDAP filters involving distinguishedName attribute don’t work?

I have several OUs containing sub OUs like APPS, USERS etc:

MYDOMAIN.COM

COMPANY1 (OU)
USERS (SUB OU)
APPS (SUB OU)
MACHINES (SUB OU)

COMPANY2 (OU)
USERS (SUB OU)
APPS (SUB OU)
MACHINES (SUB OU)

Etc.

I need to extract all user accounts from USERS sub OUs. So I create the following csvde query:

Csvde –f file.txt –r “(&(objectClass=user)(distinguishedName=*OU=USERS*))”

However, it doesn’t work. I tried many other combinations involving distinguishedName but it doesn’t like asterisk.
It works on other attributes though.

Any idea why?

Regards,

Michael.

 

[TechyMcSe2k]

Not an expert and brushing up on LDAP queries:

http://technet.microsoft.com/en-us/library/cc732101.aspx

csvde -d "ou=USERS,ou=company1,dc=mydomain,dc=com" -r objectClass=user -l Distinguishname -f file.csv

See if the above is what you need.

________________________________________
Achieving a perception of high intelligence level can only be limited by your manipulation skills of the Google algorithm!

 

[TheMisio]

TechyMcSe2k,


Thank you for your reply.

However, this is not exactly what I meant. I know how to create the query to get users from OU=USERS,OU=COMPANY1,DC=MYDOMAIN,DC=COM.

I wanted to find out if I can search entire domain, but filter out only those users that belong to USERS sub OUs.

Regards,

Michael

 

[TechyMcSe2k]

To my knowledge, microsoft didn't build in ldap exclusion queries for OU names in multiple instances. I'll keep researching though.

________________________________________
Achieving a perception of high intelligence level can only be limited by your manipulation skills of the Google algorithm!

 

[TechyMcSe2k]

But I do notice an attribute called "name" which gives just the name of the OU. the Distinguishedname Attribute value is the full path to that OU. Try your Query with just "name" instead

________________________________________
Achieving a perception of high intelligence level can only be limited by your manipulation skills of the Google algorithm!

 

[TheMisio]

TechyMcSe2k,

Was affraid that might be the case.

Thanks for your input anyway.

Regards,

Michael

 

[TechyMcSe2k]

Csvde –r objectClass=user -l name=USERS –f file.txt

________________________________________
Achieving a perception of high intelligence level can only be limited by your manipulation skills of the Google algorithm!

 

[TheMisio]

TechyMcSe2k,

It must be your naming convention. I don't have an OU included in the name.

Regards,

Michael

 

[TechyMcSe2k]

nah, wont work. sorry about that.


________________________________________
Achieving a perception of high intelligence level can only be limited by your manipulation skills of the Google algorithm!