Как узнать адрес ldap сервера windows

Get-ADDomainController will list your domain controllers from domain
If you want to check it from another domain then use -server switch.

get-addomaincontroller -server "domain"

«nslookup -query=srv _ldap._tcp.DOMAINNAME» worked for me, tried nslookup -type=srv _ldap._tcp.DOMAINNAME and didn’t work.

Server 2008 R2

answered Jun 5, 2019 at 21:02

C:> nslookup 
> set types=all
> _ldap._tcp.<<your.AD.domain>>
_ldap._tcp.<<your.AD.domain>>  SRV service location:
      priority       = 0
      weight         = 100
      port           = 389
      svr hostname   = <<ldap.hostname>>.<<your.AD.domain>>

4

If you’re using AD you can use serverless binding to locate a domain controller for the default domain, then use LDAP://rootDSE to get information about the directory server, as described in the linked article.

Answers

• You can use

  nltest /dclist:yourdomain.com

  hth
  Marcin

  • Edited by

    Saturday, January 1, 2011 12:21 PM
  • Proposed as answer by
    Meinolf Weber
    Saturday, January 1, 2011 3:55 PM
  • Marked as answer by
    Bruce-Liu
    Friday, January 28, 2011 9:31 AM

• You need to use your own domain name as the parameter of the /dclist switch i.e.

  nltest /dclist:yourdomain.com

  alternatively you can use procedure described in
  http://support.microsoft.com/kb/816587 to query DNS i.e.:

  1. Click Start, and then click Run.
  2. In the Open box, type cmd.
  3. Type nslookup, and then press ENTER.
  4. Type set type=all, and then press ENTER.
  5. Type _ldap._tcp.dc._msdcs.<var>Domain_Name</var>, where <var>Domain_Name</var> is the name of your domain, and then press ENTER.

  hth
  Marcin

  • Proposed as answer by
    Meinolf Weber
    Saturday, January 1, 2011 3:55 PM
  • Marked as answer by
    Bruce-Liu
    Friday, January 28, 2011 9:31 AM

• Once again — YOU NEED TO SPECIFY YOUR DOMAIN NAME AS THE PARAMETER OF THE /dclist switch when running nltest.

  So in your case, this likely would be:

  nltest /dclist:mcg.muhaidibco.com

  All of the entries listed as the output of this command represent individual domain controllers for the domain you provided. Each one of them functions as an LDAP server

  hth
  Marcin

  • Proposed as answer by
    Meinolf Weber
    Saturday, January 1, 2011 3:55 PM
  • Marked as answer by
    Bruce-Liu
    Friday, January 28, 2011 9:31 AM

I’ve been looking for a way to get Active Directory’s LDAP server url from code running as domain user. The code needs to work correctly in situation with disjoint namespace, if possible. It’s unmanaged code so any .NET solutions are not an option unfortunately.

For some reason serverless binding doesn’t seem to be working in this case with ADO query returning unhelpful One or more errors occurred during processing of command error when using LDAP://DC=mycompany,DC=local (that’s the value of the defaultNamingContext attribute of rootDSE object).

Using the LOGONSERVER and USERDNSDOMAIN environment variables doesn’t appear to be an option either because the code also needs to be able to run under the SYSTEM account and there are no such variables there.

Any ideas or hints or specific RTFM advice will be much appreciated.

Update: The DNSHostName attribute of rootDSE seems to be what I need.

asked Mar 13, 2014 at 13:03

Set cn = CreateObject("ADODB.Connection")
Set cmd= CreateObject("ADODB.Command")
cn.Provider = "ADsDSOObject;"
cn.open
cmd.ActiveConnection = cn

' Root DSE required to get the default configuration naming context to
' be used as the root of the seach
set objRootDSE = getobject("LDAP://RootDSE")
' Construct the LDAP query that will find all the domain controllers
' in the domain
ldapQuery = "<LDAP://" & objRootDSE.Get("ConfigurationNamingContext") & _
    ">;((objectClass=nTDSDSA));ADsPath;subtree"

cmd.CommandText = ldapQuery
cmd.Properties("Page Size") = 1000
Set rs = cmd.Execute

do while rs.EOF <> True and rs.BOF <> True
    ' Bind to the domain controller computer object
    ' (This is the parent object of the result from the query)
    set objDC = getobject(getobject(rs(0)).Parent)

    wscript.echo objDC.dNSHostName
        rs.MoveNext
Loop

cn.close

1

The DNSHostName attribute of rootDSE seems to be what I need.

I’ve been looking for a way to get Active Directory’s LDAP server url from code running as domain user. The code needs to work correctly in situation with disjoint namespace, if possible. It’s unmanaged code so any .NET solutions are not an option unfortunately.

For some reason serverless binding doesn’t seem to be working in this case with ADO query returning unhelpful One or more errors occurred during processing of command error when using LDAP://DC=mycompany,DC=local (that’s the value of the defaultNamingContext attribute of rootDSE object).

Using the LOGONSERVER and USERDNSDOMAIN environment variables doesn’t appear to be an option either because the code also needs to be able to run under the SYSTEM account and there are no such variables there.

Any ideas or hints or specific RTFM advice will be much appreciated.

Update: The DNSHostName attribute of rootDSE seems to be what I need.

asked Mar 13, 2014 at 13:03

Set cn = CreateObject("ADODB.Connection")
Set cmd= CreateObject("ADODB.Command")
cn.Provider = "ADsDSOObject;"
cn.open
cmd.ActiveConnection = cn

' Root DSE required to get the default configuration naming context to
' be used as the root of the seach
set objRootDSE = getobject("LDAP://RootDSE")
' Construct the LDAP query that will find all the domain controllers
' in the domain
ldapQuery = "<LDAP://" & objRootDSE.Get("ConfigurationNamingContext") & _
    ">;((objectClass=nTDSDSA));ADsPath;subtree"

cmd.CommandText = ldapQuery
cmd.Properties("Page Size") = 1000
Set rs = cmd.Execute

do while rs.EOF <> True and rs.BOF <> True
    ' Bind to the domain controller computer object
    ' (This is the parent object of the result from the query)
    set objDC = getobject(getobject(rs(0)).Parent)

    wscript.echo objDC.dNSHostName
        rs.MoveNext
Loop

cn.close

1

The DNSHostName attribute of rootDSE seems to be what I need.