Question

我正在使用ldap3。我想要检索AD的所有组织单位。这是我的代码

from ldap3 import Server, Connection, SUBTREE, ALL
total_entries = 0

s = Server('172.30.1.197', port=636, use_ssl=True, get_info=ALL)
admin_username = "Administrator@naanal.local"
admin_password = "p@ssw0rd1"
c = Connection(s, user=admin_username, password=admin_password)
c.bind()
c.start_tls()

c.search(search_base = 'dc=naanal,dc=local',
         search_filter = '(objectClass=OrganizationalUnit)',
         search_scope = SUBTREE,
         paged_size = 5)

total_entries += len(c.response)

for entry in c.response:
    print(entry)

print('Total entries retrieved:', total_entries)

输出：

{'dn': u'OU=Domain Controllers,DC=naanal,DC=local', 'attributes': {}, 'raw_attributes': {}, 'type': 'searchResEntry'}
{'dn': u'OU=Police,DC=naanal,DC=local', 'attributes': {}, 'raw_attributes': {}, 'type': 'searchResEntry'}
{'dn': u'OU=dummy,DC=naanal,DC=local', 'attributes': {}, 'raw_attributes': {}, 'type': 'searchResEntry'}
{'type': 'searchResRef', 'uri': ['ldaps://ForestDnsZones.naanal.local/DC=ForestDnsZones,DC=naanal,DC=local']}
{'type': 'searchResRef', 'uri': ['ldaps://DomainDnsZones.naanal.local/DC=DomainDnsZones,DC=naanal,DC=local']}
{'type': 'searchResRef', 'uri': ['ldaps://naanal.local/CN=Configuration,DC=naanal,DC=local']}
('Total entries retrieved:', 6)

结果中的最后三个条目是什么？为什么会这样？

Answer 1

最后三个条目看起来像推荐。根据文档，推荐追踪可以被禁用。见这里：http://ldap3.readthedocs.io/connections.html

c = Connection(s, user=admin_username, password=admin_password, auto_referrals=False)

如何在LDAP中检索Active Directory的所有OU？

1 个答案: