Thanks Robert,


Sean Hogan
Security Engineer

From:   Rob Crittenden <>
To:     Sean Hogan/Durham/IBM@IBMUS,
Date:   12/07/2015 03:30 PM
Subject:        Re: [Freeipa-users] Ldap search for enrolled boxes

Sean Hogan wrote:
> Hello,
> Does anyone have a ldapsearch syntax that will check the database for
> all enrolled hosts within IPA and ignore non-enrolled hosts? I am not
> familiar enough with the schema yet to know which containers contain
> what. I know there is a flag on the gui for enrolled or not so thinking
> its doable. Also.. any recommendations on a ldap query tool for use with
> IPA?

$ kinit admin
$ ldapsearch -Y GSSAPI -b cn=computers,cn=accounts,dc=example,dc=com
"krbprincipalkey=*" dn

Any ldap query tool should work with IPA.


Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to