RE: Protocol error w/ldapsearch against Exchange

[Bryan Rapp <BRapp@GeoFields.com>]

Title: RE: Protocol error w/ldapsearch against Exchange

Thanks for the tip Bruno,

 

Luckily my Exchange box is a test server so I just reinstalled MSEX5.5 and renamed my organization to exclude the ',Inc.'.  Everything is working fine now with no more errors! 

 

FWIW, renaming the Organization on a large production site is not something I would ever really want to go through after reading the procedure on the MS site. 

 

Thank again,

Bryan

-----Original Message-----
From: Bruno Spieler [mailto:bruno.spieler@atosorigin.com]
Sent: Thursday, November 07, 2002 3:15 PM
To: Bryan Rapp; 'openldap-software@openldap.org'
Subject: Re: Protocol error w/ldapsearch against Exchange

Hi Bryan,

 

It seems that there is a problem with your base dname. From the search you've made, it looks like "cn=Recipients,ou=SITE,o=ORGANIZATION, Inc."

 

Does the o attribute actualy contain a "," (comma) character ? In this case, I guess you should escape it because it's a special characters in a dname (or change your naming suffix ;) ) !

 

Try using a '\' as escape character, but be careful about how your shell of whatever you're using will regard it !

 

Hoping it will help !

 

 

 

Bruno

 

 

 

----- Original Message -----

From: Bryan Rapp

To: 'openldap-software@openldap.org'

Sent: Thursday, November 07, 2002 7:01 PM

Subject: RE: Protocol error w/ldapsearch against Exchange

Thanks for the script (this is the output I'm eventually looking for), however, the error still remains:

Protocol error (2)

except repeated 25 more times of course.

I've also tried the -P 2 and -P 3 options with the same result.  Any more ideas?

Thanks,

Bryan Rapp
GeoFields,Inc.

-----Original Message-----
From: Ralf Hildebrandt [mailto:Ralf.Hildebrandt@charite.de]
Sent: Thursday, November 07, 2002 11:50 AM
To: Bryan Rapp
Cc: 'openldap-software@openldap.org'
Subject: Re: Protocol error w/ldapsearch against Exchange

On Thu, Nov 07, 2002 at 11:12:26AM -0500, Bryan Rapp wrote:
> I'm brand new to OpenLDAP, but I would like to use ldapsearch to get a list
> of valid email addresses from a MS Exchange 5.5 LDAP directory.  I've read
> through lots of posts about others doing the same thing, so I think my
> syntax is correct, but I keep receiving the following:
>
> $ ldapsearch -v -x -H ldap://172.16.1.202:389 -b
> "cn=Recipients,ou=SITE,o=ORGANIZATION, Inc." proxyAddresses

Try this (it's for win2k, thoufh):

#!/bin/bash
rm -f liste
for letter in a b c d e f g h i j k l m n o p q r s t u v w x y z
do ldapsearch -z 0 -C -x -H ldap://dc-charite-1.charite.de -b cn=users,dc=CHARITE,dc=de -D cn=administrator,cn=users,dc=CHARITE,dc=de -w "secret" -LLL sAMAccountName=$letter* mail >> liste;

done
awk '/^mail:/ {printf("%s OK\n", tolower($2));}' liste | sort

--
Ralf Hildebrandt (Im Auftrag des Referat V a)   Ralf.Hildebrandt@charite.de
Charite Campus Mitte                            Tel.  +49 (0)30-450 570-155
Referat V a - Kommunikationsnetze -             Fax.  +49 (0)30-450 570-916
Why you can't find your system administrators:
Have you checked under the desk/crawlspace?