ldapsearch.sh

SERVER="dc1.us.yourcompany.com"
DN="CN=aUserLogin,OU=SomeOrgUnit,OU=AnotherOrgUnit,DC=dc1,DC=us,DC=yourcompany,DC=com"
PASSWORD="aUserLoginsPassword"
OU="ou=AnotherOrgUnit,dc=us,dc=yourcompany,dc=com"

ldapsearch -h "$SERVER" -p 389 \
    -x -D "$DN" -w "$PASSWORD" \
    -t -s sub -b "$OU" "(&(objectClass=user)(sAMAccountName=anotherUserLogin))" "thumbnailPhoto"


# Or, get all the users in one go...

ldapsearch -h "$SERVER" -p 389 \
    -x -D "$DN" -w "$PASSWORD" \
    -t -s sub -b "$OU" "(&(objectClass=user)(thumbnailPhoto=*))" "sAMAccountName" "thumbnailPhoto"