Searching for users and groups

If you want to use ldapsearch to find a user, do not use objectclass=user or objectcategory=person to specify the filter. Instead, you should use objectclass=posixaccount. For example, to find the user with the UNIX name jtr enter a command similar to the following:

/usr/share/centrifydc/bin/ldapsearch -x -h localhost -D 
“CN=Administrator,CN=Users,DC=pistolas,DC=org” -W -b 
“dc=pistolas,dc=org” "(&(objectclass=posixaccount)(uid=jtr))"“

Optionally, use the UID number instead of the UNIX name:

"(&(objectclass=posixaccount)(uidNumber=1234567))"

Similarly, use objectclass=posixgroup to retrieve information on a group. This filter supports the following options:

  • cn: Find a group with a given UNIX name
  • gidNumber: Find a group with a given GID
  • memberUID: Search for secondary group membership of given UNIX user.