Ldap on MS Active Directory Server

[Lowery, Michael]

I have a Barracuda Spam firewall that relies on ldap lookups to
determine if a recipient for a given e-mail is valid.  I'd like to
replicate what it is doing with Hobbit.  The test that I'm running now
will tell me if ldap is responding to queries, but I'd like to actually
do a specific lookup for an e-mail address.  The tests I have tried all
return 0 entries, even though I know the user or e-mail exists.  

#####
Henrik wrote:
ldap://10.2.165.108:389/ou=workoutusers,ou=WorkOutBase,o=sample.com??sub
?(uid=thomsonm)
#####

I tried using the example Henrik gave, but it isn't working.  I probably
have to authenticate to bind to the ldap server (Windows 2000 Global
Catalogue), but I'm not sure exactly how.  I have tried:

ldap://ldapserverip/dc=domain,dc=com
ldap://ldapserverip/o=domain.com
ldap://username:password@ldapserverip/dc=domain,dc=com
ldap://username:password@ldapserverip/o=domain.com
ldap://ldapserverip:389/ou=users,o=domain.com??sub?(uid=validuser)
ldap://ldapserverip/dc=domain,dc=com?(objectclass=*)

And about every other combination of these that I could think of.  Some
will return green, but if they do, they always say "yields 0 results".  


Any ldap gurus out there that can help me understand what I'm doing
wrong.  I've read the rfc on ldap urls, tried several of their examples,
but I may be losing something in the translation (maybe I'm just not
"getting" it).

Thanks,
Michael
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20050613/dd6e4636/attachment.html>