Question

I am trying to test a connection to AD using OpenLDAP and this is what I try on the command line:

/usr/bin/ldapsearch -h names.myorg.com \
    -p 389 \
    -D "cn=conapps readonly,cn=users,dc=myorg,dc=com" \
    -LLL \
    -x \
    -b "ou=MyOrg Staff,ou=People,dc=myorg,dc=com" \
    -s sub "(objectClass=*)" DN sn givenName mail userPrincipalName employeeID usertype \
    -W

However, I keep getting the following error:

Operations error (1)
Additional information: 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece

Can anybody see what I am doing incorrectly?

Answer 1

I think your password for bindDN is wrong, The bindDn which you are specifying is cn=readonly,cn=users,dc=myorg,dc=com and the password using -W is empty. It may be wrong and it is unable to authenticate you before doing a search.