[389-users] Re: Help with ldapsearch query

[Sergei Gerasenko]

It does seem to be permission issue. Thank you.

> On Apr 16, 2018, at 2:05 PM, Mark Reynolds  wrote:
> 
> 
> 
> On 04/16/2018 01:25 PM, Sergei Gerasenko wrote:
>> Hi,
>> 
>> I need to get a list of hosts from 389-ds that have ipaSshPubKey set and I’m 
>> having trouble contructing that. I’ve tried this:
>> 
>> ldapsearch -h HOST -b cn=computers,cn=accounts,dc=cnvr,dc=net 
>> 'ipaSshPubKey=*’
> It could be an access control issue,  You should specify a bind DN and 
> password, and maybe change the search base:
> 
> ldapsearch -D "cn=directory manager" -W -h HOST -p PORT -b "dc=cnvr,dc=net"  
> 'ipaSshPubKey=*’
>> 
>> 
>> … but that doesn’t seem to work.
>> 
>> Am I missing something simple?
>> 
>> Thanks,
>> Sergei
>> 
>> 
>> ___
>> 389-users mailing list -- 389-users@lists.fedoraproject.org 
>> 
>> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org 
>> 
> 

___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org

[389-users] Re: Help with ldapsearch query

[Mark Reynolds]

On 04/16/2018 01:25 PM, Sergei Gerasenko wrote:
> Hi,
>
> I need to get a list of hosts from 389-ds that have ipaSshPubKey set
> and I’m having trouble contructing that. I’ve tried this:
>
> ldapsearch -h HOST -b cn=computers,cn=accounts,dc=cnvr,dc=net
> 'ipaSshPubKey=*’
It could be an access control issue,  You should specify a bind DN and
password, and maybe change the search base:

ldapsearch -D "cn=directory manager" -W -h HOST -p PORT -b
"dc=cnvr,dc=net"  'ipaSshPubKey=*’
>
> … but that doesn’t seem to work.
>
> Am I missing something simple?
>
> Thanks,
> Sergei
>
>
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org

___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org

[389-users] Re: Help with ldapsearch query

[Sergei Gerasenko]

No error per se. I’m just not getting the results I’m expecting. It’s not 
including some hosts that have ipaSshPubKey set. 

> On Apr 16, 2018, at 12:34 PM, Leo Pleiman  wrote:
> 
> What error are you getting if you run this from the command line?
> 
> Leo Pleiman
> Senior System Engineer
> Direct 202-787-3622
> Cell 410-688-3873
> 
> DonorPro merged with Salsa, read about it here. 
> 
> On Mon, Apr 16, 2018 at 1:25 PM, Sergei Gerasenko  > wrote:
> Hi,
> 
> I need to get a list of hosts from 389-ds that have ipaSshPubKey set and I’m 
> having trouble contructing that. I’ve tried this:
> 
> ldapsearch -h HOST -b cn=computers,cn=accounts,dc=cnvr,dc=net 'ipaSshPubKey=*’
> 
> … but that doesn’t seem to work.
> 
> Am I missing something simple?
> 
> Thanks,
> Sergei
> 
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org 
> 
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org 
> 
> 
> 
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org

___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org

[389-users] Re: Help with ldapsearch query

[Leo Pleiman]

What error are you getting if you run this from the command line?

Leo Pleiman
Senior System Engineer
Direct 202-787-3622
Cell 410-688-3873

DonorPro merged with Salsa, read about it here.


On Mon, Apr 16, 2018 at 1:25 PM, Sergei Gerasenko  wrote:

> Hi,
>
> I need to get a list of hosts from 389-ds that have ipaSshPubKey set and
> I’m having trouble contructing that. I’ve tried this:
>
> ldapsearch -h HOST -b cn=computers,cn=accounts,dc=cnvr,dc=net
> 'ipaSshPubKey=*’
>
> … but that doesn’t seem to work.
>
> Am I missing something simple?
>
> Thanks,
> Sergei
>
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
>
>
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org