Hi,  bharath , thanks for the link,command  working fine ,ldapsearch -v -x -W -h 10.10.20.50 -D cn=testuser1,ou=testusers,dc=kpairtest,dc=local -b ou=testusers,dc=kpairtest,dc=localwhat is binddn  , rootbinddn , basepart that needs to be specified in ldap.conf for openldap client,can we  have either in /etc/ldap.conf or  /etc/openldap/ldap.conf  ?and does ldapsearch()  automatically looks for configuration in /etc/ldap.confThanksSantosh Kumar Sr Software Engineer On Tue, 10 Mar 2009 05:21:58 -0400 "Kantrapati, Bharath" wrote Hi santosh,   Your mail is not clear , what is it you are exactly looking for??   But as the error says the objects you are trying to query would require you to bind to the active directory with a set of credentials.   Regards Bharath   From: openldap-technical-bounces+bharath.kantrapati=gs.com(a)OpenLDAP.org [mailto:openldap-technical-bounces+bharath.kantrapati=gs.com@OpenLDAP.org] On Behalf Of Santosh Kumar Sent: Tuesday, March 10, 2009 11:39 AM To: openldap-technical(a)openldap.org Subject: ldap-client connection to AD - LdapErr: DSID-0C090627,   Trying to query Active Directory  via command line for searching all Please let me know what this error refers to ./ldapsearch  -h 10.10.10.50 -b "ou=users,DC=SFBAY,DC=tech,DC=com"  -s sub "objectclass=*" # extended LDIF # # LDAPv3 # base with scope subtree # filter: objectclass=* # requesting: ALL # # search result search: 2 result: 1 Operations error text: 00000000: LdapErr: DSID-0C090627, comment: In order to perform this ope  ration a successful bind must be completed on the connection., data 0, vece # numResponses: 1  i'm  looking to extract -b option and -D from AD Please if anyone is aware let me know. Thanks Santosh