Re: [Freeipa-users] Ldap search for enrolled boxes
Thanks Robert, Appreciated Sean Hogan Security Engineer From: Rob Crittenden To: Sean Hogan/Durham/IBM@IBMUS, freeipa-users@redhat.com Date: 12/07/2015 03:30 PM Subject:Re: [Freeipa-users] Ldap search for enrolled boxes Sean Hogan wrote: > Hello, > > Does anyone have a ldapsearch syntax that will check the database for > all enrolled hosts within IPA and ignore non-enrolled hosts? I am not > familiar enough with the schema yet to know which containers contain > what. I know there is a flag on the gui for enrolled or not so thinking > its doable. Also.. any recommendations on a ldap query tool for use with > IPA? $ kinit admin $ ldapsearch -Y GSSAPI -b cn=computers,cn=accounts,dc=example,dc=com "krbprincipalkey=*" dn Any ldap query tool should work with IPA. rob -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
Re: [Freeipa-users] Ldap search for enrolled boxes
Sean Hogan wrote: > Hello, > > Does anyone have a ldapsearch syntax that will check the database for > all enrolled hosts within IPA and ignore non-enrolled hosts? I am not > familiar enough with the schema yet to know which containers contain > what. I know there is a flag on the gui for enrolled or not so thinking > its doable. Also.. any recommendations on a ldap query tool for use with > IPA? $ kinit admin $ ldapsearch -Y GSSAPI -b cn=computers,cn=accounts,dc=example,dc=com "krbprincipalkey=*" dn Any ldap query tool should work with IPA. rob -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
[Freeipa-users] Ldap search for enrolled boxes
Hello, Does anyone have a ldapsearch syntax that will check the database for all enrolled hosts within IPA and ignore non-enrolled hosts? I am not familiar enough with the schema yet to know which containers contain what. I know there is a flag on the gui for enrolled or not so thinking its doable. Also.. any recommendations on a ldap query tool for use with IPA? Sean Hogan -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project