I tried following and it worked for me.

ldapsearch -Y GSSAPI -b "cn=compat,dc=ipa,dc=example,dc=com" '(&(objectClass=posixAccount)(uid=aduser@<AD-DOMAIN>))'

On Tue, Aug 24, 2021 at 12:22 PM iulian roman via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hello,

I try to run some ldapsearch queries on the compat tree from some old clients. Unfortunately it does display only the Idm posix users, not the AD trust users. The query I am running for a particular AD user :

ldapsearch  -Y GSSAPI  -h  ipaserver01.ipa.example.com -b "cn=compat,dc=ipa,dc=example,dc=com"  "uid=aduser@example.com"

Any idea how to debug or where to look into  ?
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure


--

--

Regards

Mohammad Rizwan

He/Him/His

Senior Software Quality Engineer

Red Hat Pune

myusuf@redhat.com   
M: +91-9823948657    
IM: rizwan