Re: newbie question - LDAP and Active Directory

["Mark H. Wood" <mwood@IUPUI.Edu>]

ldapsearch will use your Kerberos tickets if you have them.  You'd need to
have Kerberos clients installed on the system hosting your LDAP tools, and
have it configured to know where the KDCs are for your ADS realm.  Then
'kinit user@REALM' will get you a TGT from one of the ADS DCs.  After
that, the OpenLDAP tools should negotiate the necessary service ticket
and present it to the LDAP service with no further need for passwords.

Don't forget to kdestroy the ticket cache when you're done.

-- 
Mark H. Wood, Lead System Programmer   mwood@IUPUI.Edu
MS Windows *is* user-friendly, but only for certain values of "user".