Re: ldap query of IBM i

Hello Rob,

Am 09.09.2020 um 15:57 schrieb Rob Berendt <rob@xxxxxxxxx>:

I am looking for a ldap tool, preferably gui, which I can use to point to my IBM i ldap and search it.

See here for a list: https://ldap.com/ldap-tools/

ldapsearch -h gdihq.corp.dekko.com -D os400-profile=ITIM -w redacted -b "os400-sys=GDIHQ.dekko-1" -s sub objectclass=OS400-usrprf
I get a list of users, but not a whole lot of attributes.

See here: https://linux.die.net/man/1/ldapsearch

You need to add a '*' after your objectclass= filter, so all available attributes are returned. You need to enclose the * in single quotes, or QSH will expand it to any files found in the current directory, thus creating a bogus attribute list.

"If ldapsearch finds one or more entries, the attributes specified by attrs are returned. If * is listed, all user attributes are returned. If + is listed, all operational attributes are returned. If no attrs are listed, all user attributes are returned. If only 1.1 is listed, no attributes will be returned."

This did help me with one correction on that ldapsearch command but it doesn't list the attributes returned. I'm sure there's something like ldapsearch only returns certain columns by default and I need to directly ask for others.

Yap. Read the docs. ;-) Unfortunately, manpages aren't available on IBM i because you can't use less (pager) in an 5250 fake-scrolling-terminal, and because of the crude way of just compiling stuff for AIX and copying over the binaries, there's no real help as we're used to from the CL environment.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc