LDAP Filter Syntax Query

Question

What would be the syntax for LDAP for the below scenario:

Where sAMAccountName = GRA-* without $. I want the records which are highlighted in green.

This is my current LADP Filter for your reference:

(&(objectClass=user)sAMAccountName=GRA-*))

Anyone, Please help with the correct syntax.

Gabriel Luci · Accepted Answer · 2022-12-07 17:23:43Z

2

Your filter can work, but you're missing a ( in front of sAMAccountName:

(&(objectClass=user)(sAMAccountName=GRA-*))

But you may be able to do better. If those ones that end in $ are computer objects (which always have sAMAccountNames that end in $, but also have an objectClass of user), then you can make sure you only get user objects by including (objectCategory=person):

(&(objectClass=user)(objectCategory=person)(sAMAccountName=GRA-*))

If, for whatever reason, those $ objects are actually user accounts, then you can exclude them with (!sAMAccountName=*$):

(&(objectClass=user)(objectCategory=person)(sAMAccountName=GRA-*)(!sAMAccountName=*$))

answered Dec 7, 2022 at 17:23

Gabriel Luci

41.5k4 gold badges66 silver badges98 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

LDAP Filter Syntax Query

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related