Cody Ashe-McNalley via FreeIPA-users wrote:
Sure, here it is with just the ipaserver hostname substituted.
ldapsearch -LLL -Y GSSAPI -b cn=services,cn=accounts,dc=atmos,dc=ucla,dc=edu
'(krbprincipalname=HTTP/<ipaserver>@ATMOS-UCLA-EDU)'
Assuming it's not obfuscation, you need to replace the value for
<ipaserver> with the name of the server that's failing.
rob