Re: ldapsearch against ldap directory on the i

Manuals and links are all well and good but sometimes some actual examples
help. For example, if you haven't already accessed the ldap and figured
out what available attributes there are how do you know that this will
work
ldapsearch -h GDIHQ -D os400-profile=ITIM -w passworddeleted -s base
objectclass=*
instead of just trying this
ldapsearch -h GDIHQ -D ITIM -w passworddeleted -s base objectclass=*

or that objectclass=* will return object classes like
OS400Software,eOperatingSystem, eComputerSystem, container but not
os400-usrprf? To get that you have to use a base, know what that base is,
and how to limit it to just user profiles?
ldapsearch -h GDIHQ -D os400-profile=ITIM -w passworddeleted -b
"os400-sys=GDIHQ.dekko-1" -s sub objectclass=OS400-usrprf

So the above explained would be

-h GDIHQ
See Host name from CFGTCP, 12. Change TCP/IP domain information

-D os400-profile=ITIM
A user profile (WRKUSRPRF) with appropriate clearance. ITIM has *SECADM
and *ALLOBJ.

-w passworddeleted
The password associated with the user profile used in os400-profile.
Haven't played with it well enough to know if case matters or if it
matters varies on the settings of certain system values.

-b "os400-sys=GDIHQ.dekko-1"
Change GDIHQ.dekko-1 to match the Host name dot Domain name extracted from
CFGTCP, 12. Change TCP/IP domain information

-s sub
not base, not one.

objectclass=OS400-usrprf
You just want user profiles and not a list of software loaded on there.
Software would be objectclass=OS400Software and omit the -b parameter.




Rob Berendt