[Date Prev][Date Next]
Re: AW: best way to export a whole ldap directory
Kick, Claus wrote:
Try something like (depends a bit on your OS):
ldapsearch -b 'your base dn' -D 'your user ' -w 'password' cn=* >
One should rather use "*" "+" as 'attributes' to also get operational
attributes (if needed). And the filter above does not catch entries
which does not have a attribute 'cn' at all.
So this would be a better example (in one line):
ldapsearch -x -b <search-base> -D <bind-DN> -w <password>
"(objectClass=*)" "*" "+"
Note that the entity specified by the bind-DN should have full read
access to the whole content. The server's rootdn has full access
circumventing all ACLs.