[Samba] can't connect ldapsearch with samba 4

mj lists at merit.unu.edu
Sat Jun 18 10:11:26 UTC 2016


> how can I query samba 4 AD ldap with ldapsearch?

Just don't use ldaps://, instead use Kerberos (-k yes):

kinit administrator
ldbsearch -H ldap://addc.example.net "cb=administrator" -k yes

I know it seems strange, but direct encryption with Kerberos is more 
secure than LDAP over SSL/TLS. Therefore, we only accept simple binds 
over ldaps:// by default, or:

ldap server require strong auth = no

Hope that helps,

More information about the samba mailing list