Search other domains with `ldapsearch` about cs-situational-awareness-bof HOT 2 CLOSED

This should be possible with the existing code, while it was contained in the built-in help I noticed it was not reflected in our readme.

from help ldapsearch

ldapsearch <query> [comma_separated_attributes] [result_count] [DC hostname or IP] [Distingished Name to use]
	"" works as a default for attributes (get all) DC hostname / IP (use Primary DC) and distingished name (use Base domain Level)
	0 works as default for result_count (get all)

what you will need to do is specify all the way to Distinguished Name
ex. ldapsearch (objectClass=user) "" 10 dc.otherdomain.org DC=otherdomain,DC=org

If this answers you question please close this issue, thanks!

from cs-situational-awareness-bof.

That's a great answer, thank you. I wasn't aware you could do that.

With regards to querying forest root to get a listing of all domains, someone on Slack suggested the following:
ldapsearch (trustattributes:1.2.840.113556.1.4.803:=32) "" 0 sub.domain.com CN=System,DC=sub,DC=domain,DC=com which worked perfectly !

from cs-situational-awareness-bof.