Thanks, Russel, I missed that, but you have to do it in a "for each user"
loop.
The single ldapquery would be easier.
______________________________________________________________________________________________
Daniel E. White
mailto:daniel.e.white@nasa.gov
NICS Linux Engineer
NASA Goddard Space Flight Center
8800 Greenbelt Road
Building 14, Room E175
Greenbelt, MD 20771
Office: (301) 286-6919
Mobile: (240) 513-5290
From: Russell Long <kd8fre(a)gmail.com>
Date: Friday, July 10, 2020 at 09:58
To: FreeIPA-Users <freeipa-users(a)lists.fedorahosted.org>
Cc: Daniel White <daniel.e.white(a)nasa.gov>
Subject: [EXTERNAL] Re: [Freeipa-users] It ain't easy to dig a user's last login
time info out of IdM/FreeIPA
I use this:
ipa user-show $USER --all --raw | grep krbLastSuccessful | awk '{print $2}'