[Freeipa-users] IPA client ldapsearch

[Joe Linoff]

Hi Rob:

> Your best bet is to use the ipa-admintools package.

Thank you, I appreciate the help. As you suggested, I will use the
ipa-admintools package.

> You probably don't to install this on every client.

That makes sense.

Regards,

Joe

-----Original Message-----
From: Rob Crittenden [mailto:rcritten at redhat.com] 
Sent: Wednesday, June 20, 2012 11:26 AM
To: Joe Linoff
Cc: freeipa-users at redhat.com
Subject: Re: [Freeipa-users] IPA client ldapsearch

Joe Linoff wrote:
> Hi:
>
> This is a best practices question. I am really impressed with FreeIPA 
> and I want to make sure that I follow the recommended usage paradigms.
>
> What is the best way to do a ldapsearch operation on a FreeIPA client?
>
> One approach would be to install LDAP utilities on the client and run 
> ldapsearch.
>
> Another approach might be to install the ipa-admintools package on the

> client.
>
> Since all I want to do is a simple query (like "ipa user-find" on the 
> ipa-server), I wasn't sure whether the ipa-admintools made sense.

Your best bet is to use the ipa-admintools package. This way you don't
have to work about the LDAP internals. If you have some need for
something the tools can't provide you can always fall back to using
ldapsearch.

You probably don't to install this on every client.

rob