39.3. Viewing subID information about IdM users by using IdM CLI

Prerequisites

• You have configured a subID range on the IdM client. For more information, see Generating subID ranges using IdM CLI.
• You have obtained an IdM admin ticket-granting ticket (TGT). For details, see Using kinit to log in to IdM manually.

Procedure

• To view the details about a subID range:

  • If you know the unique ID hash of the Identity Management (IdM) user that is the owner of the range:

    $ ipa subid-show 359dfcef-6b76-4911-bd37-bb5b66b8c418
    
      Unique ID: 359dfcef-6b76-4911-bd37-bb5b66b8c418
      Owner: idmuser
      SubUID range start: 2147483648
      SubUID range size: 65536
      SubGID range start: 2147483648
      SubGID range size: 65536

  • If you know a specific subID from that range:

    $ ipa subid-match --subuid=2147483670
    
    1 subordinate id matched
    
      Unique ID: 359dfcef-6b76-4911-bd37-bb5b66b8c418
      Owner: uid=idmuser
      SubUID range start: 2147483648
      SubUID range size: 65536
      SubGID range start: 2147483648
      SubGID range size: 65536
    
    Number of entries returned 1