Re: syntax

Merci pour le lien vers SSP, je vais jeter un oeil, ça me semble bien pour ce que je veux faire :)

Pour la recherche:

ldapsearch -x -b ou=Users,dc=cerbere,dc=athaliasoft,dc=lan memberOf="XMPP Users"

# extended LDIF
#
# LDAPv3
# base <ou=Users,dc=cerbere,dc=athaliasoft,dc=lan> with scope subtree
# filter: memberOf=XMPP Users
# requesting: ALL
#
# search result
search: 2
result: 0 Success
# numResponses: 1

Pour info, un slapcat sur mon user donne ça:

54ce8ff6 UNKNOWN attributeDescription "SAMBADOMAINNAME" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBASID" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBANEXTRID" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBALOGONTIME" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBALOGOFFTIME" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAKICKOFFTIME" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAPWDCANCHANGE" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAPWDMUSTCHANGE" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAHOMEDRIVE" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAPRIMARYGROUPSID" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAACCTFLAGS" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBALMPASSWORD" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBANTPASSWORD" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAPWDLASTSET" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAGROUPTYPE" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAPASSWORDHISTORY" inserted.
dn: uid=richard,ou=Users,dc=cerbere,dc=athaliasoft,dc=lan
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: inetOrgPerson
objectClass: sambaSamAccount
cn: richard
sn: richard
uid: richard
uidNumber: 1001
gidNumber: 513
homeDirectory: /mnt/volume1/homes/richard
gecos: System User
givenName: richard
structuralObjectClass: inetOrgPerson
entryUUID: 07344d10-3d1e-1034-81d2-27135b4eb476
creatorsName: cn=admin,dc=cerbere,dc=athaliasoft,dc=lan
createTimestamp: 20150130224944Z
SAMBALOGONTIME: 0
SAMBALOGOFFTIME: 2147483647
SAMBAKICKOFFTIME: 2147483647
SAMBAPWDCANCHANGE: 0
SAMBAPWDMUSTCHANGE: 2147483647
displayName: richard
SAMBASID: S-1-5-21-554797014-832614532-3218386644-1001
SAMBANTPASSWORD: xxxxx
shadowLastChange: 16465
loginShell: /bin/bash
seeAlso: cn=email,ou=Roles,dc=cerbere,dc=athaliasoft,dc=lan
seeAlso: cn=xmpp,ou=Roles,dc=cerbere,dc=athaliasoft,dc=lan
seeAlso: cn=freeradius,ou=Roles,dc=cerbere,dc=athaliasoft,dc=lan
seeAlso: cn=files,ou=Roles,dc=cerbere,dc=athaliasoft,dc=lan
userPassword:: xxxxxx
SAMBAPASSWORDHISTORY: 00000000000000000000000000000000000000000000000000000000
 00000000
SAMBAPWDLASTSET: 1422660231
SAMBAACCTFLAGS: [UX ]
entryCSN: 20150201171055.332238Z#000000#000#000000
modifiersName: cn=admin,dc=cerbere,dc=athaliasoft,dc=lan
modifyTimestamp: 20150201171055Z
54ce8ff6 UNKNOWN attributeDescription "SAMBAALGORITHMICRIDBASE" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBANEXTUSERRID" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAMINPWDLENGTH" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAPWDHISTORYLENGTH" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBALOGONTOCHGPWD" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAMAXPWDAGE" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAMINPWDAGE" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBALOCKOUTDURATION" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBALOCKOUTOBSERVATIONWINDOW" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBALOCKOUTTHRESHOLD" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAFORCELOGOFF" inserted.
54ce8ff6 UNKNOWN attributeDescription "SAMBAREFUSEMACHINEPWDCHANGE" inserted.

Et un slapcat sur le groupe:

54ce9074 UNKNOWN attributeDescription "SAMBADOMAINNAME" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBASID" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBANEXTRID" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBALOGONTIME" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBALOGOFFTIME" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAKICKOFFTIME" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAPWDCANCHANGE" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAPWDMUSTCHANGE" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAHOMEDRIVE" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAPRIMARYGROUPSID" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAACCTFLAGS" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBALMPASSWORD" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBANTPASSWORD" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAPWDLASTSET" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAGROUPTYPE" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAPASSWORDHISTORY" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAALGORITHMICRIDBASE" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBANEXTUSERRID" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAMINPWDLENGTH" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAPWDHISTORYLENGTH" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBALOGONTOCHGPWD" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAMAXPWDAGE" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAMINPWDAGE" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBALOCKOUTDURATION" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBALOCKOUTOBSERVATIONWINDOW" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBALOCKOUTTHRESHOLD" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAFORCELOGOFF" inserted.
54ce9074 UNKNOWN attributeDescription "SAMBAREFUSEMACHINEPWDCHANGE" inserted.
dn: cn=XMPP Users,ou=Groups,dc=cerbere,dc=athaliasoft,dc=lan
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: XMPP Users
gidNumber: 1000
structuralObjectClass: posixGroup
entryUUID: c9f6be56-3e80-1034-81dc-27135b4eb476
creatorsName: cn=admin,dc=cerbere,dc=athaliasoft,dc=lan
createTimestamp: 20150201170912Z
SAMBASID: S-1-5-21-554797014-832614532-3218386644-1004
SAMBAGROUPTYPE: 2
displayName: XMPP Users
memberUid: richard
entryCSN: 20150201171055.319123Z#000000#000#000000
modifiersName: cn=admin,dc=cerbere,dc=athaliasoft,dc=lan
modifyTimestamp: 20150201171055Z

On voit dans le groupe que l'user est présent, mais pas l'inverse (pas la seule étrangeté d'ailleurs...)