Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm using the ldapsearch.exe binary that was installed along with an Oracle client. It took awhile to tease out the arguments that it wanted, but I'm able to successfully connect to AD and parse out text attributes (given a username, look up an email, etc). But I'd also like to grab the avatar images that Exchange/Lync use. According to some Microsoft documentation I dug up, the attribute name is thumbnailPhoto. I couldn't figure it out at first, but this command doesn't produce angry error messages:

ldapsearch -v -h xxx.yyy.edu -Z -b cn=USERNAME,ou=Computers,ou=yyy,dc=yyy,dc=edu cn=USERNAME thumbnailPhoto

When I run that, I get the following output:

ldap_open( xxx.yyy.edu, 389 )
filter pattern: cn=USERNAME
returning: thumbnailPhoto
filter is (cn=USERNAME)
1 matches

There is no file in the current directory, there is no file in %TEMP%. If I use -t with or without arguments, no files are downloaded. No binary garbage fills the console window. I get identical behavior whether or not I run the command from bash (msys) or cmd.exe.

What gives? It looks like I'm doing everything right. But I'm running out of ways to debug. Am I not even using the right tools?

share|improve this question
ldapsearch should be fine. Do you get useful output if you query text fields (e.g. ... cn=USERNAME givenName)? Are you sure USERNAME has a thumbnailPhoto? Maybe filter by '(&(cn=USERNAME)(thumbnailPhoto=*))' instead and also look for jpegPhoto. –  Hagen von Eitzen Mar 1 '13 at 18:41
I should have been using -A. Neither jpegPhoto nor thumbnailPhoto are showing up... but that's weird, because I definitely see my own Lync picture as being set. –  John O Mar 1 '13 at 19:00
What happens if you explicitly specify that the output should ldif formatted: ldapsearch -L ? –  Mathias R. Jessen Mar 5 '13 at 20:36
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.