# ipa user-add --first=Foo --last=Bar --manager admin fbar

# ipa user-add --first=Foo --last=Bar --manager fbar fbar2
------------------
Added user "fbar2"
------------------
...
  Manager: uid=fbar,cn=users,cn=accounts,dc=mkosek-fedora20,dc=test
...

# ipa user-del fbar
-------------------
Deleted user "fbar"
-------------------

# ipa user-show fbar2 --all
  dn: uid=fbar2,cn=users,cn=accounts,dc=mkosek-fedora20,dc=test
...
  Manager: fbar   <<<<
...

# ldapsearch -h `hostname` -D "cn=Directory Manager" -x -w Secret123 -b
'cn=referential integrity postoperation,cn=plugins,cn=config'
# extended LDIF
#
# LDAPv3
# base <cn=referential integrity postoperation,cn=plugins,cn=config> with scope
subtree
# filter: (objectclass=*)
# requesting: ALL
#

# referential integrity postoperation, plugins, config
dn: cn=referential integrity postoperation,cn=plugins,cn=config
objectClass: top
objectClass: nsSlapdPlugin
objectClass: extensibleObject
cn: referential integrity postoperation
nsslapd-pluginPath: libreferint-plugin
nsslapd-pluginInitfunc: referint_postop_init
nsslapd-pluginType: betxnpostoperation
nsslapd-pluginEnabled: on
nsslapd-pluginprecedence: 40
referint-update-delay: 0
referint-logfile: /var/log/dirsrv/slapd-MKOSEK-FEDORA20-TEST/referint
referint-logchanges: 0
referint-membership-attr: member
referint-membership-attr: uniquemember
referint-membership-attr: owner
referint-membership-attr: seeAlso
nsslapd-plugin-depends-on-type: database
nsslapd-pluginId: referint
nsslapd-pluginVersion: 1.3.3.2.a1
nsslapd-pluginVendor: 389 Project
nsslapd-pluginDescription: referential integrity plugin
nsslapd-pluginarg7: manager
nsslapd-pluginarg8: secretary
nsslapd-pluginarg9: memberuser
nsslapd-pluginarg10: memberhost
nsslapd-pluginarg11: sourcehost
nsslapd-pluginarg12: memberservice
nsslapd-pluginarg13: managedby
nsslapd-pluginarg14: memberallowcmd
nsslapd-pluginarg15: memberdenycmd
nsslapd-pluginarg16: ipasudorunas
nsslapd-pluginarg17: ipasudorunasgroup
nsslapd-pluginentryscope: dc=mkosek-fedora20,dc=test
nsslapd-plugincontainerscope: dc=mkosek-fedora20,dc=test
nsslapd-pluginarg18: ipatokenradiusconfiglink

# search result
search: 2
result: 0 Success

# numResponses: 2