[389-users] Re: ldapsearch and 389ds

On 06/02/2016 07:34 PM, Job Cacka wrote:
> so I did this:
> ldapsearch -H ldaps://ds1.domain.com -D "cn=directory manager" -w "pass" -b "uid=test2015,ou=USERS,dc=domain,dc=com

Right, the problem was that you added "[-x]" which was treated as a
requested attribute. This obviously is not a real attribute so no other
attributes were returned. It was also breaking the filter for some reason.

[02/Jun/2016:15:45:04 -0700] conn=36851 op=1 SRCH base="dc=domain,dc=com" scope=2 filter="(objectClass=*)" attrs="[-x] uid=*"

This is the ldapsearch you were probably trying to do:

ldapsearch -H ldaps://ds1.domain.com -D "cn=directory manager" -w "pass"
-xLLL -b "dc=domain,dc=com" uid=test2015

Anyway, you could have just removed the brackets around the -x and it
would have solved your problems. Glad you got it working.

Mark

>
> and it gave me the expected results. All of the attributes for the uid=test2015
> --
> 389-users mailing list
> 389-users@lists.fedoraproject.org
> https://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
--
389-users mailing list
389-users@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org