...
Replace "ldap-broker-fqdn" with the FQDN of your DualShield LDAP broker, and "username" with the username of the user to be searched, e.g
(Please note that "cn=dualshield,dc=deepnetsecurity,dc=com" is the fixed DN of the admin account, and "password" is the fixed password of the admin account)
ldapsearch -H 'ldap://dualshield.fakestop.com:389' -x -D 'cn=dualshield,dc=deepnetsecurity,dc=com' -w 'password' -b 'dc=deepnetsecurity,dc=com' '(samAccountName=2fa)'
...