[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: AW: best way to export a whole ldap directory

Try using this:

slapcat > base.ldap


On Tue, Apr 8, 2008 at 11:23 AM, Michael Ströder <michael@stroeder.com> wrote:
Kick, Claus wrote:

Try something like (depends a bit on your OS):
ldapsearch -b 'your base dn' -D 'your user ' -w 'password' cn=* >

One should rather use "*" "+" as 'attributes' to also get operational attributes (if needed). And the filter above does not catch entries which does not have a attribute 'cn' at all.

So this would be a better example (in one line):

ldapsearch -x -b <search-base> -D <bind-DN> -w <password> "(objectClass=*)" "*" "+"

Note that the entity specified by the bind-DN should have full read access to the whole content. The server's rootdn has full access circumventing all ACLs.

Ciao, Michael.

Gabriel Stein
MSN: gabrielstein@hotmail.com
Administrador de Redes -
Network Administrator
Linux User #223750
+55 51 9357 3886
Porto Alegre - RS - Brasil