Oddly enough it looks like it comes out as part of the LDIF comment.  If you skip the option to tell it to not output ldif comments you'll get your base:

$ ldapsearch -d1 -x "(uid=example)" 2>&1 | grep base

# base <dc=example,dc=com> (default) with scope subtree

On Wed, Nov 24, 2010 at 3:58 AM, Gerrard Geldenhuis <Gerrard.Geldenhuis@betfair.com> wrote:
> -----Original Message-----
> From: 389-users-bounces@lists.fedoraproject.org [mailto:389-users-
> bounces@lists.fedoraproject.org] On Behalf Of Angel Bosch Mora
> Sent: 24 November 2010 09:20
> To: General discussion list for the 389 Directory server project.
> Subject: Re: [389-users] get base dn from ldapsearch
> > Maybe I am understanding this wrong but could you not just check in
> > the config what the search base is set to on the client side? What is
> > the problem you are trying to solve?
> >
> yes, you're right. i can just take a look at ldap.conf but there's several places
> to look:
> - debian/ubuntu uses /etc/ldap/ldap.conf
> - RHEL/CentOS uses /etc/openldap/ldap.conf
> - custom compilations can use any path. ex: /usr/local/ldap/ldap.conf
> - windows openldap uses... i don't really know :P
> so what im trying to do is resolving configured base without knowing
> anything about the client.
> for example, this command gives me the server even if i dont know
> anything about the conf:
> ldapsearch -d1 -x -LLL "(uid=example)" uid 2>&1 | grep
> ldap_connect_to_host
> im just a little bit surprised that i can't find any debuglevel that gives me the
Hmmm, that is a really interesting problem. I could not find any solution to it either.

from the man page
-d debuglevel
             Set the LDAP debugging level to debuglevel.  ldapsearch must be compiled with LDAP_DEBUG defined for this option to have any effect.

that is just bloody useless, why do I have to google to find a sun man page that contains the actual possible debug levels. Why is it not part of the man page in Red Hat / CentOS ?!!?!?!?!

Lets get rid of man pages save some disk space and find everything with google, who reads man pages anyway.


In order to protect our email recipients, Betfair Group use SkyScan from
MessageLabs to scan all Incoming and Outgoing mail for viruses.