Re: [Freeipa-users] ldapsearch queries for audit

2014-12-17 Thread Herb Burnswell
Dimitry, Thank you for your response. I don't necessarily need to do everything in a single query. I'm just interested in understanding how to output the information I need and I can adjust the queries accordingly. I.E. where is the information saved: cn=sudoers, where sudo info is saved, etc.

Re: [Freeipa-users] ldapsearch queries for audit

2014-12-17 Thread Dmitri Pal
On 12/17/2014 01:05 PM, Herb Burnswell wrote: Dimitry, Thank you for your response. I don't necessarily need to do everything in a single query. I'm just interested in understanding how to output the information I need and I can adjust the queries accordingly. I.E. where is the

Re: [Freeipa-users] ldapsearch queries for audit

2014-12-16 Thread Craig White
From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of Herb Burnswell Sent: Tuesday, December 16, 2014 12:32 PM To: freeipa-users@redhat.com Subject: [Freeipa-users] ldapsearch queries for audit All, We are running the following versions on RHEL 6.6:

Re: [Freeipa-users] ldapsearch queries for audit

2014-12-16 Thread Herb Burnswell
Craig, Thank you for the reply. Running the ipa hostgroup-show does not appear to provide specific information about individual users. Also, ideally I'd like to see if I can gather the actual sudo rules that one would see in an /etc/sudoers file to the specific hosts. I'll investigate if the

Re: [Freeipa-users] ldapsearch queries for audit

2014-12-16 Thread Dmitri Pal
On 12/16/2014 02:31 PM, Herb Burnswell wrote: All, We are running the following versions on RHEL 6.6: ipa-server.x86_64 3.0.0-42.el6 389-ds.noarch1.2.2-1.el6 I'm not very experienced with the ldapsearch and would greatly appreciate some guidance. I'd like to run some ldapsearch's