ipaspike.py

#!/usr/bin/env bash

# Let's do some dumb things.

from ipalib import api, errors
import sys

api.bootstrap_with_global_options(context='example.org')
api.finalize()

try:
    api.Backend.xmlclient.connect()
except errors.CCacheError:
    print "You don't have a kerberos token, run kinit and try again."
    sys.exit(1)

print "Looking up the admin user"
print api.Command.user_show(u'admin')

This works against FreeIPA 3.0, by the way, 4.0 moves from an XML-RPC to a JSON-RPC.