Bug 1311257

Summary: [RFE] compat tree: show AD members of IPA groups
Product: Red Hat Enterprise Linux 7 Reporter: Jan Kurik <jkurik>
Component: slapi-nisAssignee: Alexander Bokovoy <abokovoy>
Status: CLOSED ERRATA QA Contact: Namita Soman <nsoman>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 7.0CC: abokovoy, bobby.prins, dpal, ekeck, enewland, jkurik, ksiddiqu, mkosek, pbokoc, rcritten, sbose, snagar, wdh
Target Milestone: rcKeywords: FutureFeature, ZStream
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
The Schema Compatibility plug-in supports exposing users and groups from trusted Active Directory forests with the help of SSSD running on the IdM master server. Previously, the plug-in did not expose these users as part of IdM groups even if the group membership is defined in IdM, which prevented legacy clients from subjecting Active Directory users to sudo rules and group-restricting access rules. This update enables support for resolving external members of IdM groups and exporting their information to the Schema Compatibility plug-in, improving compatibility with legacy clients.
Story Points: ---
Clone Of: 1138797 Environment:
Last Closed: 2016-05-12 09:57:49 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1138797    
Bug Blocks:    

Description Jan Kurik 2016-02-23 18:12:39 UTC
This bug has been copied from bug #1138797 and has been proposed
to be backported to 7.2 z-stream (EUS).

Comment 5 Kaleem 2016-03-18 16:32:34 UTC
Verified as per https://bugzilla.redhat.com/show_bug.cgi?id=1311502#c6

Comment 7 errata-xmlrpc 2016-05-12 09:57:49 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-1043.html