Hello
Adquery goes through adclient and its cache. Adclient does NOT get all attributes of AD user/group - only the essential ones that it needs for operation.
Additional attributes can be specified by setting adclient.custom.attributes.user in /etc/centrifydc/centrifydc.conf.
This requires an adclient restart and flush
- /usr/share/centrifydc/bin/centrifydc restart
- adflush -f
Additionally, you may want to consider using Adedit instead. Adedit uses its own connection to AD to get objects, so it can get anything as long as the connection credential has permission to do so.
I hope this helps. Have a great day!
-Ryan V