Re: database table on IBM i needed for Active Directory users on Windows domain

I had also found useful general documentation on ldapsearch using google - it's generally available on lots of platforms, apparently.

Chuck, you have seen a bit of the work I was doing with LDAP - ldapsearch is what I used.

For the record, here is the syntax -

ldapsearch /parameters searchfilter attributes

//parameters/ can be stuff like -h host-ip-address

/searchfilter/ is done with combinations of things like CN=some-value. We used this to limit the results to people in the US and Canada.

/attributes /is the list of attributes you want returned. To get first and last name, you specify, for example, givenname sn/

/Syntax for the search filter is kind of funky, feels like reverse polish or the like! Not as bad as Query/400, of course!/
/

On 4/27/2013 4:15 PM, CRPence wrote:

On 27 Apr 2013 11:34, Richard Schoen wrote:

Is ldapsearch part of qsh or pase or is there an install needed ?

The ldapsearch is one of the /command-line/ [not a /CL/ command]
utilities made available as part of the "Directory Server utilities that
can be run from the Qshell command environment." The utilities are
available as part of the IBM Tivoli Directory Server for IBM i (LDAP),
referred to as just the Directory Server, which "is automatically
installed when you install the IBM® i operating system." So apparently
using the default path within QSH, the utilities should be available;
e.g. the following request issued on any system with IBM i installed,
should describe the Directory Server environment\version to the standard
output, even if nothing has ever been done prior with the LDAP on that
system:
QSH CMD('ldapsearch -e')

Here is a link to the parent topic:
IBM i 7.1 Information Center -> Networking -> TCP/IP applications,
protocols, and services
http://pic.dhe.ibm.com/infocenter/iseries/v7r1m0/topic/rzahy/rzahyrzahywelpo.htm
_i IBM Tivoli Directory Server for IBM i (LDAP) i_
"IBM® Tivoli® Directory Server for IBM i (here after referred to as
Directory Server) is a function of the IBM i operating system that
provides a Lightweight Directory Access Protocol (LDAP) server. LDAP
runs over Transmission Control Protocol/Internet Protocol (TCP/IP) and
is popular as a directory service for both Internet and non-Internet
applications.
..."

A link to the Directory Server command line utilities available from
within the QSH:
IBM i 7.1 Information Center -> Networking -> TCP/IP applications,
protocols, and services -> IBM Tivoli Directory Server for IBM i (LDAP)
-> Reference
http://pic.dhe.ibm.com/infocenter/iseries/v7r1m0/topic/rzahy/rzahycmds.htm
_i Directory Server command line utilities i_
"This section describes the Directory Server utilities that can be run
from the Qshell command environment. ..."