Active Directory users and groups lists

["Koos, Remus" <rkoos@snapappliances.com>]

>   I am trying to query a MS Active Directory server using LDAP for the
> users/groups that are defined for that server. I am using this command
> line from a Linux box
> 
>   ldapsearch -h adserver.mydomain.com -b 'cn=users,dc=mydomain,dc=com'
> 'objectclass=*'
> 
> without too much success. At the previous command 'ldapsearch' doesn't say
> anything. If I try 'ou=users' instead of 'cn=users', I am told:
> 
>   ldap_search: No such object.
>   ldap_search: matched: DC=mydomain,DC=com
>   ldap_search: additional info: 0000208D: NameErr: DSID-031001C9, problem
> 2001 (NO_OBJECT), data0, best match of
>     'DC=mydomain,DC=com'
> 
>   I also tried: 
> 
>   ldapsearch -h adserver.mydomain.com -b 'dc=mydomain,dc=com'
> 'objectclass=users'
> 
> with not too much success. When I do 
> 
>   ldapsearch -h adserver.mydomain.com -b 'dc=mydomain,dc=com'
> 'objectclass=*'
> 
> I am returned lots of entries related to "Configuration" and "DNS", but
> none of the users and/or groups.
> Does anybody know how to get the users/groups lists from a MS Active
> Directory server ?
> 
>   Thanks for the help,
> 
>     rk
> 
>