Basically, I'm writing a script that determines an acceptable default for a base DN when pointed at a particular hostname. I'm wrapping it around
- I can do Active Directory by looking directly at the root DSE and pulling
- I can do Domino by starting a one-level search directly underneath DSE filtering for the
dominoOrganizationobjectClass and just taking the first one (it's a default so if it's not correct they can be expected to just change it).
- I can do OpenLDAP by looking directly at root DSE and extracting the first value of
But I'd also like for this to support eDirectory just in case. Problem is that I don't have any eDirectory installs to look at and it's not free software so I can't install an test version of it to see how it's set up.
Looking at Novell's site it looks like they don't really do the same
defaultNamingContext thing AD does, and they're definitely not going to do a dominoOrganization objectClass. Most example DN's I've seen for eDirectory look like they also use
o=OrganizationName like exists in Domino but I've also seen
o=OrganizationName,C=US so if the country abbreviation could or could not be in the base DN, I would have to do more than just one_level.
What makes things worse is if the directory server is partitioned (like some AD configurations) or is like Domino where there are many built-in default organizations that don't reflect where you'd find the important LDAP information. For example there's a
O=RSA Data Security\, Inc.,C=US organization in the Domino LDAP instance I'm looking at now.
Is there a particular objectClass I can filter for if I start a search at root DSE? I realize this is an expensive search (esp when if I have to go full
sub on the scope) but this should be a once-in-a-while type thing.
Long story short: What identifying attributes does the base of a company's organization have in eDirectory and how do I locate it if I set my search base to root DSE?
I'd prefer examples since I won't be able to validate your code works until I run into the off-chance of needing to run this script on an eDirectory server (we're higher education so this is definitely possible).