[Freeipa-users] Ldap search for enrolled boxes

[Rob Crittenden]

Sean Hogan wrote:
> Hello,
> 
> Does anyone have a ldapsearch syntax that will check the database for
> all enrolled hosts within IPA and ignore non-enrolled hosts? I am not
> familiar enough with the schema yet to know which containers contain
> what. I know there is a flag on the gui for enrolled or not so thinking
> its doable. Also.. any recommendations on a ldap query tool for use with
> IPA?

$ kinit admin
$ ldapsearch -Y GSSAPI -b cn=computers,cn=accounts,dc=example,dc=com
"krbprincipalkey=*" dn

Any ldap query tool should work with IPA.

rob