How to dump LDAP Schema

KB Home   |   How to dump LDAP Schema

Main.LDAPSchemaDump History

Hide minor edits - Show changes to output

Added lines 23-34:
!! I use `OpenLDAP, what is my `BaseDN and `AdminDN?

You should be able to obtain your `AdminDN and `BaseDN from your [@slapd.conf@], this is often located in [@/usr/local/etc/openldap/@] or [@/etc/openldap@]. On Mac OS X, this is called [@slapd_macosxserver.conf@]

Open the file in your favourite text editor and look for the suffix and rootdn.

Examples:
* [@suffix "dc=branch,dc=company,dc=biz"@]
* [@rootdn "uid=root,cn=users,dc=branch,dc=company,dc=biz"@]

You should know your password!

Changed line 31 from:
[-keywords: ldap schema dump, ldap support -]
to:
[-keywords: ldap schema dump, ldap support, ldapsearch.exe -]
Changed lines 23-26 from:
to:
!!! Windows users...

If you are running Windows and do not have access to a Mac OS X or Linux installation to use ldapsearch, please contact PaperCut Technical Support who has a Windows binary available for your use. You will need to reference "Internal Ticket: 3675"

March 31, 2014, at 03:11 AM by shane - fix quotes
Changed lines 9-10 from:
   ldapsearch -x -h localhost -b "[@<base dn>@]" | gzip > ldapsearch-data.gz
to:
   [@ldapsearch -x -h localhost -b "<base dn>" | gzip > ldapsearch-data.gz@]
Changed lines 13-14 from:
   ldapsearch -x -h localhost -b "" | gzip > ldapsearch-data.gz
to:
   [@ldapsearch -x -h localhost -b "" | gzip > ldapsearch-data.gz@]
Changed lines 17-20 from:
   ldapsearch -x -h localhost -D "[@<admin dn>@]" -w "[@<admin-password>@]"
      -b "[@<base dn>@]" | gzip > ldapsearch-data.gz

to:
   [@ldapsearch -x -h localhost -D "<admin dn>" -w "<admin-password>"
      -b "<base dn>" | gzip > ldapsearch-data.gz@]

Added line 23:
Changed lines 25-27 from:
to:
''Categories:'' [[Category.Troubleshooting|+]]
----

Changed lines 3-4 from:
This article applies to the Linux and Mac versions of PaperCut.
to:
This article applies to the Linux and Mac versions of PaperCut.  UNIX command-line experience is required.
Added line 8:
Added line 12:
Added line 16:
Changed lines 14-22 from:
   ldapsearch -x -h localhost -D "[@<admin dn>@]" -w "[@<admin-password>@]" -b "[@<base dn>@]" | gzip > ldapsearch-data.gz
to:
   ldapsearch -x -h localhost -D "[@<admin dn>@]" -w "[@<admin-password>@]"
       -b "[@<base dn>@]" | gzip > ldapsearch-data.gz


Email the ldapsearch-data.gz file through to support and they can use this via diagnostics and/or setting up a duplicate ennvironment.  Note:  All data will be kept confidential and deleted when not required as per our [[PrivacyPolicy|privacy policy]].

----

[-keywords: ldap schema dump, ldap support -]
Added lines 1-14:
(:title How to dump LDAP Schema:)

This article applies to the Linux and Mac versions of PaperCut.

PaperCut support may ask for an LDAP schema data to diagnose complex LDAP issues.  The following commands can be used to produce a file with LDAP information:

If the base DN is known:
  ldapsearch -x -h localhost -b "[@<base dn>@]" | gzip > ldapsearch-data.gz

With an empty base DN:
  ldapsearch -x -h localhost -b "" | gzip > ldapsearch-data.gz

If authentication is required:
  ldapsearch -x -h localhost -D "[@<admin dn>@]" -w "[@<admin-password>@]" -b "[@<base dn>@]" | gzip > ldapsearch-data.gz

Comments

Share your findings and experience with other PaperCut users. Feel free to add comments and suggestions about this Knowledge Base article. Please don't use this for support requests.

Article last modified on October 06, 2014, at 04:40 AM
Printable View   |   Article History   |   Edit Article