[389-users] Re: Help with ldapsearch query

2018-04-16 Thread Sergei Gerasenko
It does seem to be permission issue. Thank you. > On Apr 16, 2018, at 2:05 PM, Mark Reynolds wrote: > > > > On 04/16/2018 01:25 PM, Sergei Gerasenko wrote: >> Hi, >> >> I need to get a list of hosts from 389-ds that have ipaSshPubKey set and I’m >> having trouble contructing that. I’ve tried

[389-users] Re: Help with ldapsearch query

2018-04-16 Thread Mark Reynolds
On 04/16/2018 01:25 PM, Sergei Gerasenko wrote: > Hi, > > I need to get a list of hosts from 389-ds that have ipaSshPubKey set > and I’m having trouble contructing that. I’ve tried this: > > ldapsearch -h HOST -b cn=computers,cn=accounts,dc=cnvr,dc=net > 'ipaSshPubKey=*’ It could be an access con

[389-users] Re: Help with ldapsearch query

2018-04-16 Thread Sergei Gerasenko
No error per se. I’m just not getting the results I’m expecting. It’s not including some hosts that have ipaSshPubKey set. > On Apr 16, 2018, at 12:34 PM, Leo Pleiman wrote: > > What error are you getting if you run this from the command line? > > Leo Pleiman > Senior System Engineer > Direct

[389-users] Re: Help with ldapsearch query

2018-04-16 Thread Leo Pleiman
What error are you getting if you run this from the command line? Leo Pleiman Senior System Engineer Direct 202-787-3622 Cell 410-688-3873 DonorPro merged with Salsa, read about it here. On Mon, Apr 16, 2018 at 1:25 PM, Sergei

[389-users] Help with ldapsearch query

2018-04-16 Thread Sergei Gerasenko
Hi, I need to get a list of hosts from 389-ds that have ipaSshPubKey set and I’m having trouble contructing that. I’ve tried this: ldapsearch -h HOST -b cn=computers,cn=accounts,dc=cnvr,dc=net 'ipaSshPubKey=*’ … but that doesn’t seem to work. Am I missing something simple? Thanks, Sergei_

[389-users] Re: Is it possible to show user only groups he belongs to via ACI

2018-04-16 Thread Ludwig Krispenz
On 04/16/2018 05:17 PM, Mariusz Gronczewski wrote: Hi, Each of our users have DN like uid=xani,ou=users,dc=root,dc=example,dc=com There is also group hierarchy with POSIX groups having users as memberUid I have aci (at the ou=groups): (targetattr = "*") (targetfilter = (|(memberUid=xani)(ou=

[389-users] Is it possible to show user only groups he belongs to via ACI

2018-04-16 Thread Mariusz Gronczewski
Hi, Each of our users have DN like uid=xani,ou=users,dc=root,dc=example,dc=com There is also group hierarchy with POSIX groups having users as memberUid I have aci (at the ou=groups): (targetattr = "*") (targetfilter = (|(memberUid=xani)(ou=groups))) (version 3.0;acl "test auth";allow (read,co