I needed to find my roles were mapped to LDAP active directory groups. I ended up with the search below. It works, but I wanted to post it here to help others and/or ask the community for ideas on improvement.
I wanted to view the configuration stanza in /etc/system/local/authentication.conf under the [My_LDAP] stanza. Here, I can see which roles are assigned to my AD groups. I made the search below. You will notice the |transpose command. This helped to format the data in a more usable way.
| rest /services/configs/conf-authentication/My_LDAP
| transpose header_field=a column_name=role
| rename "row 1" as AD_Group
| search role!="eai:*" role!=id role=*
↧