Table of Contents

• Introduction
• The Problem: A Ticket for a Question
• Enter ldapsearch
• Why a Web UI on Top of It?
• The Architecture
• Setting Up the LDAP Client
• Searching Users and Groups
• Groups With Thousands of Members: Ranged Retrieval
• Running It
• Security Considerations
• Reflections
• Conclusion
• References

Here we are, one more ticket for a question that has a one-line answer.

Introduction

Every infrastructure person knows the scene. You need to know if a colleague is in a group, or who is in a group, or in which OU an account lives. You have no access to the domain controller, no AD console, no RSAT. So you open a ticket, wait for someone to read it, and get back a screenshot two days later.