Using Net::LDAP to talk to Active Directory

fvant · Last edited by fvant on Thu Aug 25, 2005 12:29 pm; edited 2 times in total

In a mixed environment with windows and linux, i need to read the AD and get a list of printers and groups a particular linux workstation is a member of, sort of like a logon script typically used on a windows workstation.

I think this can be done with net::ldap but can not find examples, who's used this before ?

The attributes i get with a normal ldapsearch are not sufficient.

Sparrow_CA · n00b Joined: 27 Sep 2004 Posts: 31 Location: Alberta, CA

You mean in Perl, right?
What attributes are you looking for? Have you looked at the Samba 'net' command?
_________________
Turner: You didn't beat me. You ignored the rules of engagement. In a fair fight, I'd kill you.
Sparrow: That's not much incentive for me to fight fair, then, is it?

fvant · Posted: Fri Aug 12, 2005 5:05 pm Post subject:

i am looking for e.g. list of printers, which groups and OU am i a member of, which group policies are applicable to me/my OU

Sparrow_CA · n00b Joined: 27 Sep 2004 Posts: 31 Location: Alberta, CA

I've never used Net::LDAP, sorry.
Perhaps I can help you use ldapsearch though?
Is group policy stored as an LDAP entery?
_________________
Turner: You didn't beat me. You ignored the rules of engagement. In a fair fight, I'd kill you.
Sparrow: That's not much incentive for me to fight fair, then, is it?

fvant · Posted: Fri Aug 12, 2005 7:45 pm Post subject:

like i said, ldapsearch doesn't get me what i want

Sparrow_CA · n00b Joined: 27 Sep 2004 Posts: 31 Location: Alberta, CA

What does it not get that Net::LDAP does? (curious)
_________________
Turner: You didn't beat me. You ignored the rules of engagement. In a fair fight, I'd kill you.
Sparrow: That's not much incentive for me to fight fair, then, is it?

fvant · Posted: Thu Aug 25, 2005 12:28 pm Post subject:

The big and very important difference is the paged results..Ad will not return more than a configured numer of results, typically 1000. If in my case i expect 22000 result i only get 1000 and an error.

Using net::ldap and the pagedcontrol i get all 22000 in chunks of 1000 (or whatever i request but smaller than the max. defined in AD).