Configured LDAP BIND service account to log on to an AD domain controller acting as a global catalog for multiple domains. Queries to the primary domain on the controller work, but queries to any other domain within the global catalog return no results and do not throw an error. Default config is using port 3268 and a null Base DN, with the query itself defining the basedn:
works:
| ldapsearch domain="default" scope=base basedn="dc=primary, dc=domain" search="(objectclass=*)" attrs="*"
fails:
| ldapsearch domain="default" scope=base basedn="dc=other, dc=altdomain" search="(objectclass=*)" attrs="*"
(tried many variations of scope and search strings)
Note that all other AD/LDAP tools in use at the customer site can bind to this same domain controller and browse all the other domains in the global catalog.
... View more