I tried following and it worked for me.
ldapsearch -Y GSSAPI -b "cn=compat,dc=ipa,dc=example,dc=com" '(&(objectClass=posixAccount)(uid=aduser@<AD-DOMAIN>))'
Hello,
I try to run some ldapsearch queries on the compat tree from some old clients. Unfortunately it does display only the Idm posix users, not the AD trust users. The query I am running for a particular AD user :
ldapsearch -Y GSSAPI -h ipaserver01.ipa.example.com -b "cn=compat,dc=ipa,dc=example,dc=com" "uid=aduser@example.com"
Any idea how to debug or where to look into ?
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
--
Regards
Mohammad Rizwan
He/Him/His
Senior Software Quality Engineer
myusuf@redhat.com
M: +91-9823948657
IM: rizwan