你必须做两件事
- 设置搜索的基础
OU=Staff,OU=Users,OU=Accounts,DC=test,DC=local
- 搜索对象
objectClass
.
使用 PHP,搜索将如下所示(基于这个 PHP 示例 http://php.net/manual/en/ldap.examples-basic.php):
<?php
//You must bind, first
// using ldap bind
$ldaprdn = 'yourdomain\nic_hubbard'; // ldap rdn or dn
$ldappass = 'password'; // associated password
// connect to ldap server
$ldapconn = ldap_connect("yourad.test.local")
or die("Could not connect to LDAP server.");
if ($ldapconn) {
// binding to ldap server
$ldapbind = ldap_bind($ldapconn, $ldaprdn, $ldappass);
$dn = "OU=Staff,OU=Users,OU=Accounts,DC=test,DC=local";
$filter="(objectClass=user)";
$justthese = array("cn", "sn", "givenname", "mail");
$sr=ldap_search($ldapconn, $dn, $filter, $justthese);
$info = ldap_get_entries($ldapconn, $sr);
echo $info["count"]." entries returned\n";
}
?>
您可以使用此命令在命令行上进行测试(具体选项有所不同,这适用于最新的 openldap 客户端工具):
ldapsearch -H ldap://yourad.test.local -x -D "yourdomain\nic_hubbard" -W -b "OU=Staff,OU=Users,OU=Accounts,DC=test,DC=local" -s sub "(objectClass=user)"