Re: AW: best way to export a whole ldap directory

Try using this:

slapcat > base.ldap

Cheers,

On Tue, Apr 8, 2008 at 11:23 AM, Michael Ströder michael@stroeder.com wrote:

Kick, Claus wrote:

...

Try something like (depends a bit on your OS): ldapsearch -b 'your base dn' -D 'your user ' -w 'password' cn=* > somefile.txt

One should rather use "*" "+" as 'attributes' to also get operational attributes (if needed). And the filter above does not catch entries which does not have a attribute 'cn' at all.

So this would be a better example (in one line):

ldapsearch -x -b <search-base> -D <bind-DN> -w <password> "(objectClass=*)" "*" "+"

Note that the entity specified by the bind-DN should have full read access to the whole content. The server's rootdn has full access circumventing all ACLs.

Ciao, Michael.