<html><body>Thanks Robert, Appreciated Sean Hogan Security Engineer <img src="cid:1__=88BBF586DFC9C0BB8f9e8a93df938690918c88B@" width="67" height="53" align="top"> <img src="cid:2__=88BBF586DFC9C0BB8f9e8a93df938690918c88B@" width="60" height="51" align="top"> <img width="16" height="16" src="cid:3__=88BBF586DFC9C0BB8f9e8a93df938690918c88B@" border="0" alt="Inactive hide details for Rob Crittenden ---12/07/2015 03:30:40 PM---Sean Hogan wrote: > Hello,">Rob Crittenden ---12/07/2015 03:30:40 PM---Sean Hogan wrote: > Hello, From: Rob Crittenden <rcritten@redhat.com> To: Sean Hogan/Durham/IBM@IBMUS, freeipa-users@redhat.com Date: 12/07/2015 03:30 PM Subject: Re: [Freeipa-users] Ldap search for enrolled boxes <hr width="100%" size="2" align="left" noshade style="color:#8091A5; "> <tt>Sean Hogan wrote: > Hello, > > Does anyone have a ldapsearch syntax that will check the database for > all enrolled hosts within IPA and ignore non-enrolled hosts? I am not > familiar enough with the schema yet to know which containers contain > what. I know there is a flag on the gui for enrolled or not so thinking > its doable. Also.. any recommendations on a ldap query tool for use with > IPA? $ kinit admin $ ldapsearch -Y GSSAPI -b cn=computers,cn=accounts,dc=example,dc=com "krbprincipalkey=*" dn Any ldap query tool should work with IPA. rob </tt> </body></html>