I tried following and it worked for me.
ldapsearch -Y GSSAPI -b "cn=compat,dc=ipa,dc=example,dc=com" '(&(objectClass=posixAccount)(uid=aduser@<AD-DOMAIN> <[email protected]>))' On Tue, Aug 24, 2021 at 12:22 PM iulian roman via FreeIPA-users < [email protected]> wrote: > Hello, > > I try to run some ldapsearch queries on the compat tree from some old > clients. Unfortunately it does display only the Idm posix users, not the AD > trust users. The query I am running for a particular AD user : > > ldapsearch -Y GSSAPI -h ipaserver01.ipa.example.com -b > "cn=compat,dc=ipa,dc=example,dc=com" "[email protected]" > > Any idea how to debug or where to look into ? > _______________________________________________ > FreeIPA-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure > -- -- Regards Mohammad Rizwan He/Him/His Senior Software Quality Engineer Red Hat Pune <https://www.redhat.com> [email protected] M: +91-9823948657 IM: rizwan <https://red.ht/sig>
_______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
