Am Tue, Aug 24, 2021 at 06:51:25AM -0000 schrieb iulian roman via FreeIPA-users:
> Hello, 
> 
> I try to run some ldapsearch queries on the compat tree from some old 
> clients. Unfortunately it does display only the Idm posix users, not the AD 
> trust users. The query I am running for a particular AD user :
> 
> ldapsearch  -Y GSSAPI  -h  ipaserver01.ipa.example.com -b 
> "cn=compat,dc=ipa,dc=example,dc=com"  "[email protected]"

Hi,

have you tried, as Florence suggested,

    ldapsearch  -Y GSSAPI  -h  ipaserver01.ipa.example.com -b 
"cn=compat,dc=ipa,dc=example,dc=com"  
"(&(objectClass=posixAccount)([email protected]))"

HTH

bye,
Sumit

> 
> Any idea how to debug or where to look into  ?
> _______________________________________________
> FreeIPA-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedorahosted.org/archives/list/[email protected]
> Do not reply to spam on the list, report it: 
> https://pagure.io/fedora-infrastructure
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to