LDAP user lookup from child domain only returns results from parent domain

Hi all,

I have a parent domain called company.local which has two Windows 2008 R2 Server Standard Domain Controllers in it (svr3.company.local and svr9.company.local)

I have a child domain called europe.company.local, which also has two Windows Domain Controllers in (svr1.europe.company.local [Windows Server 2008 Standard] and svr6.europe.company.local [Windows Server 2008 R2 Standard)

I am trying to get a piece of software running that uses LDAP for authentication. It works fine for users in the company.local domain but not for any users in the europe.company.local domain, so I am trying to troubleshoot this.

If I got into any of the four DCs and run the command

dsquery user -name Li*

I get results for Liz (who is in the company.local domain) but none for Linda (who is in the europe.company.local domain)

1) Should I be expecting this query to return results from the child domain as well as the parent domain, or does LDAP not work like that?

2) If I should be expecting Linda (in europe.company.local) to be returned by my dsquery, then can anyone offer me any advice on what I can do to fix this problem?

Thank you for reading.
LVL 2
dr_duddAsked:
Who is Participating?
 
Krzysztof PytkoSenior Active Directory EngineerCommented:
For that you need to specify domain in which you want to run query. By default current domain is searched. please try that code
dsquery user "dc=child,dc=domain,dc=local" -name Li* | dsget user -samid -fn -ln -display

Open in new window


Regards,
Krzysztof
0
 
dr_duddAuthor Commented:
Thanks, iSiek, this worked for dsquery.

Is there a way to set a configuration option to make such lookups also traverse the child domain by default? This software application I am trying to get to use AD authentication only allows me to point it at a server that has a Global Catalog, and by default on users on the parent domain can get AD authentication to work; users in the child domain are not recognised.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.