55

For Linux, this command should return the DNS record for the LDAP server

host -t srv _ldap._tcp.DOMAINNAME

(found at Authenticating from Java (Linux) to Active Directory using LDAP WITHOUT servername)

How could I get the same on the Windows command line using nslookup?

I tried 

nslookup -type srv _ldap._tcp.DOMAINNAME

(following http://support.microsoft.com/kb/200525), would this be correct?

Improve this question

7 Answers 7

Reset to default
78

You need to use an = after -type:

nslookup -type=srv _ldap._tcp.DOMAINNAME

Replace DOMAINNAME with the actual name of the domain.

Improve this answer
1
  • 2
    still can't get Commented Mar 13, 2013 at 7:09
17

In cmd shell:

nslookup -type=all _ldap._tcp
Improve this answer
1
  • 10
    Or, in one line nslookup -type=all _ldap._tcp. Wanted so I could redirect output to a file. Commented Jul 27, 2016 at 0:58
10

None of the above worked for me, I got every time an error like this (I've tried with all the combinations I can think of with the domain names):

*** Unknown can't find _ldap._tcp: Non-existent domain

So another google search pointed to this method:

nltest /dclist:yourdomain.com

And this results in the list of the different servers in my network. Hope this saves an additional 2 minutes for someone else.

Improve this answer
1
  • nltest returned the correct information when using the "short" domain name, this short name did not resolve on the nslookup query Commented Oct 25, 2019 at 9:07
5

How to verify Service Location (SRV) locator resource records for a domain controller after you install the Active Directory directory service.

Use Nslookup to verify the SRV records, follow these steps:

  1. Click Start, and then click Run.

  2. In the Open box, type cmd.

  3. Type nslookup, and then press ENTER.

  4. Type set type=all, and then press ENTER.

  5. Type _ldap._tcp.dc._msdcs.Domain_Name, where Domain_Name is the name of your domain, and then press ENTER.

Improve this answer
2

Get-ADDomainController will list your domain controllers from domain If you want to check it from another domain then use -server switch.

get-addomaincontroller -server "domain"
Improve this answer
0

Windows cmd prompt uses "query" instead of "type" for some forsaken reason. Interactive nslookup still uses "set type=srv".

nslookup -query=srv _ldap._tcp.DOMAINNAME

EDIT: while "query" works it seems that I am 100% wrong. "type" works too.

Improve this answer
1
  • Are you sure about that? nslookup -type=srv _ldap._tcp.DOMAINNAME works as expected on Windows. Commented Sep 7, 2014 at 4:29
0

"nslookup -query=srv _ldap._tcp.DOMAINNAME" worked for me, tried nslookup -type=srv _ldap._tcp.DOMAINNAME and didn't work.

Server 2008 R2

Improve this answer

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.