How to query the "Description" field for a computer in Active Directory
Some Active Directory fields are not returned by the simple use of the popular Centrify "adquery" command. In this article we explore other ways to query that information from a Linux/UNIX system that is joined to Active Directory using the Centrify ADEDIT tool and the Centrify ldapsearch utility. This is a good way to query fields that are not returned by the popular "adquery" command.
There are two ways to do this:
Option 1: Using the ADEDIT tool.
In the is example, we are trying to see the content of the "Description" field for an object in Active Directory. Linux system named "Centos7.ocean.net" has its "Description" field populated in Active Directory, we will use the ADEDIT utility to view the content in this "Description" field. In this example, the name of my Active Directory Domain is: ocean.net
1) Log onto a Linux system that is joined to the Active Directory Domain. 2) Type "adedit" to get into the adedit shell prompt. 3) Proceed to bind to the Active Directory Domain using the "bind" command along with the Active Directory username that has permissions to read/view the information trying to be seen. In this example, the username used is "Administrator@ocean.net"