[Samba] Best practice for creating an RO LDAP User in AD...

[Rowland Penny]

On Thu, 9 Nov 2017 11:08:26 +0100
Marco Gaiarin via samba <samba at lists.samba.org> wrote:

> Mandi! L.P.H. van Belle via samba
>   In chel di` si favelave...
> 
> > I dont beleave it. 
> 
> Eh. «De gustibus non disputandum est». ;-)
> 
> 
> > The setup for the Ad in the link below is the same but if you want
> > access without auth, Have you tried to query the GC ports. ( 3268
> > or 3269 ) 
> 
> No, but now yes and does not work:
> 
>  gaio at albus:~$ ldapsearch -x -H ldap://vdcsv1:3268/ -b
> DC=ad,DC=fvg,DC=lnf,DC=it "(uid=gaio)" 

Try:

ldbsearch -H ldap://vdcsv1:3268 -P -b DC=ad,DC=fvg,DC=lnf,DC=it
'(uid=gaio)'

You will have to do this as root.

Rowland