0

I'm trying to perform an LDAP query against Active Directory from a script (very similar to this question) from a domain-joined Ubuntu machine. The script can't prompt for a password, as it won't be running interactively.

The linked question uses an OSX-specific tool (/usr/libexec/PlistBuddy). Are there Linux equivalents that I could use to grab the password so I can bind to AD?

Community
  • 1
Mark
  • 101
  • 2
  • What means "domain-joined machine" in context of Ubuntu? Do you have a domain-joined Samba installation? Or maybe AD-based LDAP/Kerberos authentication enabled in PAM? Can you accept a solution with writing separate LDAP bind password to a protected file? – sam_pan_mariusz Jul 31 '15 at 07:00
  • Sorry, I should clarify - I'm referring to AD authentication in PAM. I'd like to avoid hardcoding credentials if possible (which is why I'd prefer to use the machine account). – Mark Jul 31 '15 at 21:40
  • LDAP or Kerberos or both? If LDAP only, you probably have your bind password stored somewhere anyway, right? Is the LDAP auth bind user able to read all the requested atributes? – sam_pan_mariusz Aug 01 '15 at 08:50

0 Answers0