microsoft.ad.ldap inventory plugin filters on objectclass "computer" per default about microsoft.ad

[jborean93]

The PR #60 adds filter_without_computer as a new option that will avoid adding objectClass=computer to the final filter used.

[jborean93]

It is not possible as you've pointed out in the code where the objectClass=computer is always used even if a custom one was specified. The logic at the time was you will only ever want to retrieve back computer objects as targets to connect to as that is how AD seems to categories those types. We could technically add a new option to have it ignore this filter altogether if a new one was provided but I would be hesitant to do that by default.

I am curious if your LDAP server a Microsoft AD server or something else?

[tiagodcc]

@jborean93 My LDAP server isn't a Microsoft AD server. It uses a custom scheme that doesn't include the objectClass computer.
In Microsoft AD and other LDAP servers it is possible to change the default scheme and remove the objectClass computer. Therefore, I suggest to do this change with another option (e.g. a boolean custom_filter) to omit the default filter objectClass=computer. What do you think about this?