How can we use ldapsearch to find the full DN of a particular Active Directory group?

I've tried to pass it the options -s sub -b "DC=mydomain,DC=com" "(dn=My Group Name)" but it doesn't find it.

Using the option -s children returns an error (the manpage reports that this option requires LDAPv3 subordinate feature extension):

# search result
search: 2
result: 80 Other (e.g., implementation specific) error
text: 00000057: LdapErr: DSID-0C090AB0, comment: Error processing control, data
  0, v3839

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.