Peter Tselios via FreeIPA-users wrote: > I don't see any option to change the search schema. > Is there any way to get a similar result with the the RFC2307bis schema? > Like, using a more complex filter?
You would use member instead which requires a full DN: ldapsearch -x -W -D "uid=nonipaapps,cn=sysaccounts,cn=etc,dc=example,dc=com" -b "cn=groups,cn=accounts,dc=example,dc=com" "(&(objectClass=groupOfNames)(member=uid=ptselios,cn=users,cn=accounts,dc=example,dc=com))" -h localhost -p 389 -s sub Note that this may very well return multiple results. rob _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org