Hi, bharath , thanks for the link,command working fine ,ldapsearch -v -x -W -h 10.10.20.50 -D cn=testuser1,ou=testusers,dc=kpairtest,dc=local -b ou=testusers,dc=kpairtest,dc=localwhat is binddn , rootbinddn , basepart that needs to be specified in ldap.conf for openldap client,can we have either in /etc/ldap.conf or /etc/openldap/ldap.conf ?and does ldapsearch() automatically looks for configuration in /etc/ldap.confThanksSantosh Kumar Sr Software Engineer On Tue, 10 Mar 2009 05:21:58 -0400 "Kantrapati, Bharath" wrote Hi santosh, Your mail is not clear , what is it you are exactly looking for?? But as the error says the objects you are trying to query would require you to bind to the active directory with a set of credentials. Regards Bharath From: openldap-technical-bounces+bharath.kantrapati=gs.com@OpenLDAP.org [mailto:openldap-technical-bounces+bharath.kantrapati=gs.com@OpenLDAP.org] On Behalf Of Santosh Kumar Sent: Tuesday, March 10, 2009 11:39 AM To: openldap-technical@openldap.org Subject: ldap-client connection to AD - LdapErr: DSID-0C090627, Trying to query Active Directory via command line for searching all Please let me know what this error refers to ./ldapsearch -h 10.10.10.50 -b "ou=users,DC=SFBAY,DC=tech,DC=com" -s sub "objectclass=*" # extended LDIF # # LDAPv3 # base with scope subtree # filter: objectclass=* # requesting: ALL # # search result search: 2 result: 1 Operations error text: 00000000: LdapErr: DSID-0C090627, comment: In order to perform this ope ration a successful bind must be completed on the connection., data 0, vece # numResponses: 1 i'm looking to extract -b option and -D from AD Please if anyone is aware let me know. Thanks Santosh