Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

ldapsearch not returning list of all AD groups and users

$
0
0
I'm trying to create a lookup of the domain, ad group and user using `ldapsearch` command from `Active Direcotyr Add-on`. The below query is schduled as report and generates the lookup. If I manually verify the the data, some groups and all users from that groups are missing in the lookup. `| ldapsearch domain="test_domain" search="(&(objectClass=group))" attrs="sAMAccountName,member,groupType,sAMAccountType" | search groupType=SECURITY_ENABLED | spath | rename sAMAccountName as sAMAccountName1 | mvexpand memebr | ldapfetch domain="test_domain" dn="member" attrs="sAMAccountName,distinguishedName"` If I include the group names in the query, it generates the required lookup for the specified groups only. `| ldapsearch domain="test_domain" search="(&(objectClass=group)(|(cn=grp_prefix1*)(cn=grp_prefix2*))" attrs="sAMAccountName,member,groupType,sAMAccountType" | search groupType=SECURITY_ENABLED | spath | rename sAMAccountName as sAMAccountName1 | mvexpand memebr | ldapfetch domain="test_domain" dn="member" attrs="sAMAccountName,distinguishedName"` I'm not able to figure out, why the first query not returning the results for particular groups. I also checked that groups are not being ignored or skipped in lookup due to some limit or alphabetical order. Let me know if any other details are required.

Viewing all articles
Browse latest Browse all 47296

Trending Articles