Active Directory users and groups lists

["Koos, Remus" <rkoos@snapappliances.com>]

  I am trying to query a MS Active Directory server using LDAP for the
users/groups that are defined for that server. I am using this command line
from a Linux box

  ldapsearch -h adserver.mydomain.com -b 'cn=users,dc=mydomain,dc=com'
'objectclass=*'

without too much success. At the previous command 'ldapsearch' doesn't say
anything. If I try 'ou=users' instead of 'cn=users', I am told:

  ldap_search: No such object.
  ldap_search: matched: DC=mydomain,DC=com
  ldap_search: additional info: 0000208D: NameErr: DSID-031001C9, problem
2001 (NO_OBJECT), data0, best match of
    'DC=mydomain,DC=com'

  I also tried: 

  ldapsearch -h adserver.mydomain.com -b 'dc=mydomain,dc=com'
'objectclass=users'

with not too much success. When I do 

  ldapsearch -h adserver.mydomain.com -b 'dc=mydomain,dc=com'
'objectclass=*'

I am returned lots of entries related to "Configuration" and "DNS", but none
of the users and/or groups.
Does anybody know how to get the users/groups lists from a MS Active
Directory server ?

  Thanks for the help,

    rk