How can I get AD attributes from samba?

Question

Active Directory

Good afternoon.

We have a samba based domain.

To implement some security policies, we need to get AD attributes. But how?
The latest samba-tool documentation has a call to samba-tool user show that should return the attributes.
However, we use version 4.6, and user show appeared only in 4.9

. There is no particular desire to update just for the sake of this desire.
Tell me, what are the ways to get AD attributes from samba?

Answer 1

And what for to cycle on a samba? AD is LDAP, ldapsearch works great with LDAP. Of course, I never risked writing to it, but I use reading from AD via ldapsearch in one hundred thousand scripts.