$ ldapsearch -N -Y GSSAPI -h freeipa.corp.mycompany.com -b "cn=users,cn=accounts,dc=corp,dc=mycompany,dc=com" uid=brad.allison krbprincipalname 2>&1 |egrep "^dn|^krb"
dn: uid=brad.allison,cn=users,cn=accounts,dc=corp,dc=mycompany,dc=com
krbprincipalname: brad.allison@CORP.MYCOMPANY.COM
krbprincipalname: ballison@CORP.MYCOMPANY.COM