Przemysław Orzechowski via FreeIPA-users wrote: > I have a bunch of defined hosts in IPA - created them waiting for > different admins to enrol them. > > Is there a way to list hosts that have not been provisioned? (no > Kerberos Key Present) from cli ?
Not using IPA tools. You can with ldapsearch: ldapsearch -Q -LLL -Y GSSAPI -b cn=computers,cn=accounts,dc=example,dc=test '(&(objectclass=ipahost)(!(krbprincipalkey=*)))' cn > Same any way to list Provisioned hosts (regardless which person > provisioned them)? Drop the ! (aka not). (krbprincipalkey=*) does an existence check on the attribute. The value can't be read but it will show as present which is enough for the search to succeed. rob -- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
