How can we use
ldapsearch to find the full DN of a particular Active Directory group?
I've tried to pass it the options
-s sub -b "DC=mydomain,DC=com" "(dn=My Group Name)" but it doesn't find it.
Using the option
-s children returns an error (the manpage reports that this option requires LDAPv3 subordinate feature extension):
# search result search: 2 result: 80 Other (e.g., implementation specific) error text: 00000057: LdapErr: DSID-0C090AB0, comment: Error processing control, data 0, v3839