Hide Forgot
This bug has been copied from bug #1301901 and has been proposed to be backported to 7.2 z-stream (EUS).
Verified using ipa-server-4.2.0-15.el7_2.10.x86_64 sssd-1.13.0-40.el7_2.2.x86_64 ===IPA Server=== 1. Created Global Security Group added members from parent domain. [root@host2 ~]# getent group group1 group1:*:760201726:user2,user1 2. Created Global Security Group added members from child domain. [root@host2 ~]# getent group group2.qe group2.qe:*:1269801135:user4.qe,user3.qe 3. Created Universal Security Group and added members from parent/child domain. [root@host2 ~]# getent group universal1 universal1:*:760201725:user3.qe,user1 4. Created Universal Security Group and added members from parent/child domain. [root@host2 ~]# getent group universe2.qe universe2.qe:*:1269801136:user4.qe,user2 5. After removing user from group, found that getent group is also updated. a. After removing user3.qe from universal1 group [root@host2 ~]# getent group universal1 universal1:*:760201725:user1 b. After removing user2 from universe2.qe group [root@host2 ~]# getent group universe2.qe universe2.qe:*:1269801136:user4.qe 6. External Group [root@host2 ~]# ipa group-add --external ext_ad_administrators --desc "PNE.QE\Administrators" ----------------------------------- Added group "ext_ad_administrators" ----------------------------------- Group name: ext_ad_administrators Description: PNE.QE\Administrators [root@host2 ~]# ipa group-add-member ext_ad_administrators --external "PNE\Domain Admins" [member user]: [member group]: Group name: ext_ad_administrators Description: PNE.QE\Administrators External member: S-1-5-21-2828791737-1866347024-3967946728-512 ------------------------- Number of members added 1 ------------------------- [root@host2 ~]# ipa group-add ad_administrators ------------------------------- Added group "ad_administrators" ------------------------------- Group name: ad_administrators GID: 967200021 [root@host2 ~]# ipa group-add-member ad_administrators --group ext_ad_administrators Group name: ad_administrators GID: 967200021 Member groups: ext_ad_administrators ------------------------- Number of members added 1 ------------------------- [root@host2 ~]# getent group ad_administrators ad_administrators:*:967200021:Administrator The same output was seen on the IPA-client.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-1036.html