msAD

msad is a library and command line tool for working with an Active Directory / LDAP server from Unix, Linux and MacOs systems.

It supports authentication with user/pwd and kerberos

It supports paginations: it can retreive more than 2000 objects (a limit of AD)

Features:

• search objects (users, groups, computers,..)
• search (recursively) group memberships and all user’s groups
• add/remove members to/from AD groups using DN or sAMaccoutName
• change AD passwords

Usage

msad search “(samaccountname=matteo)” –out-format=json # show all attributes

msad search “(cn=redaelli*)” –attributes mail –attributes samaccountname –out-format=json

msad group-members qlik_analyzer_users –nested

msad group-add-member qlik_analyzer_users matteo

msad group-remove-member qlik_analyzer_users matteo

msad user-groups matteo –nested