[Freeipa-users] Re: Standard Linux Tools and Indirect Group Membership

2020-05-20 Thread Mark Potter via FreeIPA-users
All of the groups are posix groups, all have a gid assigned. groupa gid: 2044 groupb gid: 2000 dn: cn=groupa,cn=groups,cn=accounts,dc=test,dc=example cn: groupa gidnumber: 2044 member: cn=groupb,cn=groups,cn=accounts,dc=test,dc=example dn: cn=groupb,cn=groups,cn=accounts,dc=test,dc=exa

[Freeipa-users] Re: Standard Linux Tools and Indirect Group Membership

2020-05-20 Thread Rob Crittenden via FreeIPA-users
Mark Potter via FreeIPA-users wrote: > We have a large organization and a lot of groups so I've clipped the > bits that don't apply and changed the names of the actual groups for the > obvious reasons. groupb is a member of groupa, so everything appears to > be working correctly on that front.  >

[Freeipa-users] Re: Standard Linux Tools and Indirect Group Membership

2020-05-20 Thread Mark Potter via FreeIPA-users
We have a large organization and a lot of groups so I've clipped the bits that don't apply and changed the names of the actual groups for the obvious reasons. groupb is a member of groupa, so everything appears to be working correctly on that front. dn: uid=markp,cn=users,cn=accounts,dc=test,dc=ex

[Freeipa-users] Re: Standard Linux Tools and Indirect Group Membership

2020-05-19 Thread Rob Crittenden via FreeIPA-users
Alexander Bokovoy via FreeIPA-users wrote: > On ti, 19 touko 2020, Mark Potter via FreeIPA-users wrote: >> While I have seen similar posts to the list while digging through the >> archive, I cannot find this question specifically answered. We are coming >> from OpenLDAP and migrating to FreeIPA on

[Freeipa-users] Re: Standard Linux Tools and Indirect Group Membership

2020-05-19 Thread Alexander Bokovoy via FreeIPA-users
On ti, 19 touko 2020, Mark Potter via FreeIPA-users wrote: While I have seen similar posts to the list while digging through the archive, I cannot find this question specifically answered. We are coming from OpenLDAP and migrating to FreeIPA on CentOS 7.5. We are using indirect memberships to mak