Skip to content

Page Header

389 Directory Server LDAP Commands

389 Directory Server LDAP Commands published on

Password for "Directory Manager" can be found in /etc/dirsrv/setup-ds.inf

Search Directory:

# -W will ask for the password
# cn=config to see the config
ldapsearch -b "cn=config" -D "cn=Directory Manager" -W

# search for Daniel:
ldapsearch -b "uid=jon.doe,ou=People,dc=example,dc=net" -D "cn=Directory Manager" -W

# filter your search, only Group CISO RFC 2254 https://datatracker.ietf.org/doc/html/rfc2254
ldapsearch -b "ou=Groups,dc=example,dc=net" -D "cn=Directory Manager" -W "(& (cn=VSHN CISO) )"

# show ACL / ACI
ldapsearch -LLL -D "cn=Directory Manager" -W -x -b "dc=example,dc=net" -s sub '(aci=*)' aci  

# show all objects in the ldap directory, e.g. if you set up a new an want to see what's in it
ldapsearch -x -D "cn=Directory Manager" -W -x -b "" -s base "(objectclass=*)"
ldapsearch -x -D "cn=Directory Manager" -w $(sed -rn 's/^RootDNPwd = (.*)$/\1/p' /etc/dirsrv/setup-ds.inf) -x -b "" -s base "(objectclass=*)"
ldapsearch -x -D "cn=Directory Manager" -w $(sed -rn 's/^RootDNPwd = (.*)$/\1/p' /etc/dirsrv/setup-ds.inf) -x -b "dc=example,dc=net" "(objectclass=*)"

Some commands from bash history.

lapsearch -D "cn=Directory Manager" -b "cn=schema" -W
ldapsearch "cn=ReplicationAgreement,cn=replica,cn=dc\=example\,dc\=net,cn=mapping tree,cn=config"  -D "cn=admin,cn=config" -W
ldapsearch "cn=changelog5,cn=config"  -D "admin" -W
ldapsearch "cn=changelog5,cn=config"  -D "cn=Directory Manager" -W
ldapsearch "cn=changelog5,cn=config"  -D "cn=admin" -W
ldapsearch "cn=changelog5,cn=config"  -D "cn=admin,cn=config" -W
ldapsearch "cn=config"  -D "cn=Directory Manager" -W
ldapsearch "cn=config"  -D "cn=Directory Manager" -W  -LL
ldapsearch "cn=config"  -D "cn=Directory Manager" -W - -b  "cn=memberOf task, cn=tasks,cn=config"
ldapsearch "cn=config"  -D "cn=Directory Manager" -W - -b cn=config
ldapsearch "cn=config"  -D "cn=Directory Manager" -W - -b cn=config "(objectclass=*)" nsslapd-accesslog-logrotationtime nsslapd-accesslog-logrotationtimeunit nsslapd-accesslog-maxlogsize nsslapd-accesslog-maxlogsperdir
ldapsearch "cn=config"  -D "cn=Directory Manager" -W - -b cn=config "(objectclass=top)"
ldapsearch "cn=config"  -D "cn=Directory Manager" -W - -b cn=config -LLL
ldapsearch "cn=config"  -D "cn=Directory Manager" -W objectClass=ReplicationAgreement -LL
ldapsearch -D "admin" -b "cn=schema" -W
ldapsearch -D "admin" b "cn=schema" -W
ldapsearch -D "cn=Directory Manager" "cn=changelog5,cn=config" -W
ldapsearch -D "cn=Directory Manager" -W -x -b "" -s base "(objectclass=*)" aci
ldapsearch -D "cn=Directory Manager" -W -x -b "ou=Groups,dc=example,dc=net"
ldapsearch -D "cn=directory manager" -b "dc=example,dc=net" "sAMAccountName=Domain Admins" -W -LLL
ldapsearch -D "cn=directory manager" -b "uid=jon.doe,ou=Customers,dc=example,dc=net" -W
ldapsearch -D "cn=directory manager" -b "uid=jon.doe,ou=People,dc=example,dc=net" -W accountUnlockTime retryCountResetTime passwordRetryCount
ldapsearch -LLL -D "cn=Directory Manager" -W -x -b "dc=example,dc=net" nsRole
ldapsearch -LLL -D "cn=Directory Manager" -W -x -b "dc=example,dc=net" nsRole nsRoleDN
ldapsearch -LLL -D "cn=Directory Manager" -W -x -b "dc=example,dc=net" nsRole nsRoleDN nsRoleFilter
ldapsearch -LLL -D "cn=admin,cn=Administrators,cn=config" -W -b "dc=example,dc=net"
ldapsearch -LLL -D "cn=admin,cn=Administrators,cn=config" -W -b "dc=example,dc=net" "(objectclass=*)" aclEntry aclPropagate aclSource  entryOwner ownerPropagate ownerSource
ldapsearch -LLL -D "cn=admin,cn=Administrators,cn=config" -W -b "ou=Groups,ou=TopologyManagement,o=NetscapeRoot"
ldapsearch -LLL -b  "cn=HR,ou=Groups,dc=example,dc=net" -D "cn=Directory Manager" -W

Page Footer