Attacking FreeIPA — Part II Enumeration

This post provides a practical walkthrough of enumerating FreeIPA environments using LDAP queries and built-in IPA tools, covering users, hosts, groups, HBAC rules, sudo rules, and RBAC (roles, privileges, permissions). Framed from an attacker’s perspective within a lab, it demonstrates how to identify accessible objects and authorization mappings to understand delegated access and potential lateral movement paths.