Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1353602

Summary:	ipa group-find not displaying "Member groups", "Member of groups" and "Indirect Member of group" information
Product:	Red Hat Enterprise Linux 7	Reporter:	Varun Mylaraiah <mvarun>
Component:	ipa	Assignee:	IPA Maintainers <ipa-maint>
Status:	CLOSED NOTABUG	QA Contact:	Kaleem <ksiddiqu>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.3	CC:	pvoborni, rcritten
Target Milestone:	rc	Keywords:	Regression
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-07-12 15:41:11 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Varun Mylaraiah 2016-07-07 14:32:28 UTC

Description of problem:
ipa group-find not displaying "Member groups", "Member of groups" and "Indirect Member of group" information

Version-Release number of selected component (if applicable):
# rpm -qa ipa-server
ipa-server-4.4.0-1.el7.x86_64


How reproducible:
100%

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: Setup
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [  BEGIN   ] :: Kinit as admin user :: actually running 'kinitAs admin Secret123'
Password for admin: 
Default principal: admin
:: [ 01:26:13 ] :: kinit as admin with password Secret123 was successful.
:: [   PASS   ] :: Kinit as admin user (Expected 0, got 0)
'22abb54a-ef6c-4de0-ab41-6c77e928cdd0'
Setup result: PASS
   metric: 0
   Log: /var/tmp/beakerlib-42663958/journal.txt

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipa-group-members-001: Add Nested Groups Memberships
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [  BEGIN   ] :: Adding Parent group :: actually running 'addGroup "Florida Resort" disneyworld'
:: [ 01:26:14 ] :: Executing: ipa group-add --desc="Florida Resort" "disneyworld"
-------------------------
Added group "disneyworld"
-------------------------
  Group name: disneyworld
  Description: Florida Resort
  GID: 112600001
:: [ 01:26:16 ] :: Adding new group "disneyworld" successful.
:: [   PASS   ] :: Adding Parent group (Expected 0, got 0)
:: [  BEGIN   ] :: Adding Second level group :: actually running 'addGroup "All around the world" epcot'
:: [ 01:26:16 ] :: Executing: ipa group-add --desc="All around the world" "epcot"
-------------------
Added group "epcot"
-------------------
  Group name: epcot
  Description: All around the world
  GID: 112600003
:: [ 01:26:18 ] :: Adding new group "epcot" successful.
:: [   PASS   ] :: Adding Second level group (Expected 0, got 0)
:: [  BEGIN   ] :: Adding Second level group :: actually running 'addGroup "Where the wildlife is" animalkingdom'
:: [ 01:26:18 ] :: Executing: ipa group-add --desc="Where the wildlife is" "animalkingdom"
---------------------------
Added group "animalkingdom"
---------------------------
  Group name: animalkingdom
  Description: Where the wildlife is
  GID: 112600004
:: [ 01:26:20 ] :: Adding new group "animalkingdom" successful.
:: [   PASS   ] :: Adding Second level group (Expected 0, got 0)
:: [  BEGIN   ] :: Adding Third level group :: actually running 'addGroup "Country 1" germany'
:: [ 01:26:21 ] :: Executing: ipa group-add --desc="Country 1" "germany"
---------------------
Added group "germany"
---------------------
  Group name: germany
  Description: Country 1
  GID: 112600005
:: [ 01:26:24 ] :: Adding new group "germany" successful.
:: [   PASS   ] :: Adding Third level group (Expected 0, got 0)
:: [  BEGIN   ] :: Adding Third level group :: actually running 'addGroup "Country 2" japan'
:: [ 01:26:24 ] :: Executing: ipa group-add --desc="Country 2" "japan"
-------------------
Added group "japan"
-------------------
  Group name: japan
  Description: Country 2
  GID: 112600006
:: [ 01:26:27 ] :: Adding new group "japan" successful.
:: [   PASS   ] :: Adding Third level group (Expected 0, got 0)
:: [  BEGIN   ] :: Adding Third level group :: actually running 'addGroup "Prehistoric ones" dinasaurs'
:: [ 01:26:28 ] :: Executing: ipa group-add --desc="Prehistoric ones" "dinasaurs"
-----------------------
Added group "dinasaurs"
-----------------------
  Group name: dinasaurs
  Description: Prehistoric ones
  GID: 112600007
:: [ 01:26:31 ] :: Adding new group "dinasaurs" successful.
:: [   PASS   ] :: Adding Third level group (Expected 0, got 0)
:: [  BEGIN   ] :: Adding Third level group :: actually running 'addGroup "Under water ones" fish'
:: [ 01:26:31 ] :: Executing: ipa group-add --desc="Under water ones" "fish"
------------------
Added group "fish"
------------------
  Group name: fish
  Description: Under water ones
  GID: 112600008
:: [ 01:26:33 ] :: Adding new group "fish" successful.
:: [   PASS   ] :: Adding Third level group (Expected 0, got 0)
:: [  BEGIN   ] :: Nesting second level groups :: actually running 'addGroupMembers groups "epcot,animalkingdom" disneyworld'
:: [ 01:26:33 ] :: Executing: ipa group-add-member --groups=epcot,animalkingdom disneyworld
  Group name: disneyworld
  Description: Florida Resort
  GID: 112600001
  Member groups: epcot, animalkingdom
-------------------------
Number of members added 2
-------------------------
:: [ 01:26:35 ] :: Adding groups "epcot,animalkingdom" to group disneyworld successful.
:: [   PASS   ] :: Nesting second level groups (Expected 0, got 0)
:: [  BEGIN   ] :: Nesting first third level :: actually running 'addGroupMembers groups "germany,japan" epcot'
:: [ 01:26:35 ] :: Executing: ipa group-add-member --groups=germany,japan epcot
  Group name: epcot
  Description: All around the world
  GID: 112600003
  Member groups: germany, japan
  Member of groups: disneyworld
-------------------------
Number of members added 2
-------------------------
:: [ 01:26:39 ] :: Adding groups "germany,japan" to group epcot successful.
:: [   PASS   ] :: Nesting first third level (Expected 0, got 0)
:: [  BEGIN   ] :: Nesting second third level :: actually running 'addGroupMembers groups "dinasaurs,fish" animalkingdom'
:: [ 01:26:39 ] :: Executing: ipa group-add-member --groups=dinasaurs,fish animalkingdom
  Group name: animalkingdom
  Description: Where the wildlife is
  GID: 112600004
  Member groups: dinasaurs, fish
  Member of groups: disneyworld
-------------------------
Number of members added 2
-------------------------
:: [ 01:26:42 ] :: Adding groups "dinasaurs,fish" to group animalkingdom successful.
:: [   PASS   ] :: Nesting second third level (Expected 0, got 0)
'ae82a635-9b27-4ed9-80e7-589bf1eb5e27'
ipa-group-members-001-Add-Nested-Groups-Memberships result: PASS
   metric: 0
   Log: /var/tmp/beakerlib-42663958/journal.txt

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipa-group-members-002: Add Nested User Memberships
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [  BEGIN   ] :: Adding user wdisney :: actually running 'ipa user-add --first=Walt --last=Disney wdisney'
--------------------
Added user "wdisney"
--------------------
  User login: wdisney
  First name: Walt
  Last name: Disney
  Full name: Walt Disney
  Display name: Walt Disney
  Initials: WD
  Home directory: /home/wdisney
  GECOS: Walt Disney
  Login shell: /bin/sh
  Principal name: wdisney
  Principal alias: wdisney
  Email address: wdisney
  UID: 112600009
  GID: 112600009
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user wdisney (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user euser1 :: actually running 'ipa user-add --first=Epcot --last=User1 euser1'
-------------------
Added user "euser1"
-------------------
  User login: euser1
  First name: Epcot
  Last name: User1
  Full name: Epcot User1
  Display name: Epcot User1
  Initials: EU
  Home directory: /home/euser1
  GECOS: Epcot User1
  Login shell: /bin/sh
  Principal name: euser1
  Principal alias: euser1
  Email address: euser1
  UID: 112600010
  GID: 112600010
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user euser1 (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user euser2 :: actually running 'ipa user-add --first=Epcot --last=User2 euser2'
-------------------
Added user "euser2"
-------------------
  User login: euser2
  First name: Epcot
  Last name: User2
  Full name: Epcot User2
  Display name: Epcot User2
  Initials: EU
  Home directory: /home/euser2
  GECOS: Epcot User2
  Login shell: /bin/sh
  Principal name: euser2
  Principal alias: euser2
  Email address: euser2
  UID: 112600011
  GID: 112600011
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user euser2 (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user guser1 :: actually running 'ipa user-add --first=German --last=User1 guser1'
-------------------
Added user "guser1"
-------------------
  User login: guser1
  First name: German
  Last name: User1
  Full name: German User1
  Display name: German User1
  Initials: GU
  Home directory: /home/guser1
  GECOS: German User1
  Login shell: /bin/sh
  Principal name: guser1
  Principal alias: guser1
  Email address: guser1
  UID: 112600012
  GID: 112600012
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user guser1 (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user guser2 :: actually running 'ipa user-add --first=German --last=User2 guser2'
-------------------
Added user "guser2"
-------------------
  User login: guser2
  First name: German
  Last name: User2
  Full name: German User2
  Display name: German User2
  Initials: GU
  Home directory: /home/guser2
  GECOS: German User2
  Login shell: /bin/sh
  Principal name: guser2
  Principal alias: guser2
  Email address: guser2
  UID: 112600013
  GID: 112600013
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user guser2 (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user juser1 :: actually running 'ipa user-add --first=Japan --last=User1 juser1'
-------------------
Added user "juser1"
-------------------
  User login: juser1
  First name: Japan
  Last name: User1
  Full name: Japan User1
  Display name: Japan User1
  Initials: JU
  Home directory: /home/juser1
  GECOS: Japan User1
  Login shell: /bin/sh
  Principal name: juser1
  Principal alias: juser1
  Email address: juser1
  UID: 112600014
  GID: 112600014
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user juser1 (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user juser2 :: actually running 'ipa user-add --first=Japan --last=User2 juser2'
-------------------
Added user "juser2"
-------------------
  User login: juser2
  First name: Japan
  Last name: User2
  Full name: Japan User2
  Display name: Japan User2
  Initials: JU
  Home directory: /home/juser2
  GECOS: Japan User2
  Login shell: /bin/sh
  Principal name: juser2
  Principal alias: juser2
  Email address: juser2
  UID: 112600015
  GID: 112600015
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user juser2 (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user trainer1 :: actually running 'ipa user-add --first=My --last=Trainer1 trainer1'
---------------------
Added user "trainer1"
---------------------
  User login: trainer1
  First name: My
  Last name: Trainer1
  Full name: My Trainer1
  Display name: My Trainer1
  Initials: MT
  Home directory: /home/trainer1
  GECOS: My Trainer1
  Login shell: /bin/sh
  Principal name: trainer1
  Principal alias: trainer1
  Email address: trainer1
  UID: 112600016
  GID: 112600016
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user trainer1 (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user trainer2 :: actually running 'ipa user-add --first=My --last=Trianer2 trainer2'
---------------------
Added user "trainer2"
---------------------
  User login: trainer2
  First name: My
  Last name: Trianer2
  Full name: My Trianer2
  Display name: My Trianer2
  Initials: MT
  Home directory: /home/trainer2
  GECOS: My Trianer2
  Login shell: /bin/sh
  Principal name: trainer2
  Principal alias: trainer2
  Email address: trainer2
  UID: 112600017
  GID: 112600017
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user trainer2 (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user mdolphin :: actually running 'ipa user-add --first=Mister --last=Dolphin mdolphin'
---------------------
Added user "mdolphin"
---------------------
  User login: mdolphin
  First name: Mister
  Last name: Dolphin
  Full name: Mister Dolphin
  Display name: Mister Dolphin
  Initials: MD
  Home directory: /home/mdolphin
  GECOS: Mister Dolphin
  Login shell: /bin/sh
  Principal name: mdolphin
  Principal alias: mdolphin
  Email address: mdolphin
  UID: 112600018
  GID: 112600018
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user mdolphin (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user trex :: actually running 'ipa user-add --first=Tee --last=Rex trex'
-----------------
Added user "trex"
-----------------
  User login: trex
  First name: Tee
  Last name: Rex
  Full name: Tee Rex
  Display name: Tee Rex
  Initials: TR
  Home directory: /home/trex
  GECOS: Tee Rex
  Login shell: /bin/sh
  Principal name: trex
  Principal alias: trex
  Email address: trex
  UID: 112600019
  GID: 112600019
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
:: [   PASS   ] :: Adding user trex (Expected 0, got 0)
:: [  BEGIN   ] :: Adding user wdisney to group disneyworld. :: actually running 'addGroupMembers users wdisney disneyworld'
:: [ 01:27:15 ] :: Executing: ipa group-add-member --users=wdisney disneyworld
  Group name: disneyworld
  Description: Florida Resort
  GID: 112600001
  Member users: wdisney
  Member groups: epcot, animalkingdom
  Indirect Member groups: japan, germany, dinasaurs, fish
-------------------------
Number of members added 1
-------------------------
:: [ 01:27:19 ] :: Adding users "wdisney" to group disneyworld successful.
:: [   PASS   ] :: Adding user wdisney to group disneyworld. (Expected 0, got 0)
:: [  BEGIN   ] :: Adding users euser1 and euser2 to group epcot. :: actually running 'addGroupMembers users "euser1,euser2" epcot'
:: [ 01:27:19 ] :: Executing: ipa group-add-member --users=euser1,euser2 epcot
  Group name: epcot
  Description: All around the world
  GID: 112600003
  Member users: euser1, euser2
  Member groups: germany, japan
  Member of groups: disneyworld
-------------------------
Number of members added 2
-------------------------
:: [ 01:27:21 ] :: Adding users "euser1,euser2" to group epcot successful.
:: [   PASS   ] :: Adding users euser1 and euser2 to group epcot. (Expected 0, got 0)
:: [  BEGIN   ] :: Adding users guser1 and guser2 to group germany. :: actually running 'addGroupMembers users "guser1,guser2" germany'
:: [ 01:27:21 ] :: Executing: ipa group-add-member --users=guser1,guser2 germany
  Group name: germany
  Description: Country 1
  GID: 112600005
  Member users: guser1, guser2
  Member of groups: epcot
  Indirect Member of group: disneyworld
-------------------------
Number of members added 2
-------------------------
:: [ 01:27:25 ] :: Adding users "guser1,guser2" to group germany successful.
:: [   PASS   ] :: Adding users guser1 and guser2 to group germany. (Expected 0, got 0)
:: [  BEGIN   ] :: Adding users juser1 and juser2 to group japan. :: actually running 'addGroupMembers users "juser1,juser2" japan'
:: [ 01:27:25 ] :: Executing: ipa group-add-member --users=juser1,juser2 japan
  Group name: japan
  Description: Country 2
  GID: 112600006
  Member users: juser1, juser2
  Member of groups: epcot
  Indirect Member of group: disneyworld
-------------------------
Number of members added 2
-------------------------
:: [ 01:27:27 ] :: Adding users "juser1,juser2" to group japan successful.
:: [   PASS   ] :: Adding users juser1 and juser2 to group japan. (Expected 0, got 0)
:: [  BEGIN   ] :: Adding users trainer1 and trainer2 to group animalkingdom. :: actually running 'addGroupMembers users "trainer1,trainer2" animalkingdom'
:: [ 01:27:27 ] :: Executing: ipa group-add-member --users=trainer1,trainer2 animalkingdom
  Group name: animalkingdom
  Description: Where the wildlife is
  GID: 112600004
  Member users: trainer1, trainer2
  Member groups: dinasaurs, fish
  Member of groups: disneyworld
-------------------------
Number of members added 2
-------------------------
:: [ 01:27:30 ] :: Adding users "trainer1,trainer2" to group animalkingdom successful.
:: [   PASS   ] :: Adding users trainer1 and trainer2 to group animalkingdom. (Expected 0, got 0)
:: [  BEGIN   ] :: Adding users mdolphin and juser1 to group fish. :: actually running 'addGroupMembers users "mdolphin,juser1" fish'
:: [ 01:27:31 ] :: Executing: ipa group-add-member --users=mdolphin,juser1 fish
  Group name: fish
  Description: Under water ones
  GID: 112600008
  Member users: mdolphin, juser1
  Member of groups: animalkingdom
  Indirect Member of group: disneyworld
-------------------------
Number of members added 2
-------------------------
:: [ 01:27:33 ] :: Adding users "mdolphin,juser1" to group fish successful.
:: [   PASS   ] :: Adding users mdolphin and juser1 to group fish. (Expected 0, got 0)
:: [  BEGIN   ] :: Adding users trex and guser1 to group dinasaurs. :: actually running 'addGroupMembers users "trex,guser1" dinasaurs'
:: [ 01:27:33 ] :: Executing: ipa group-add-member --users=trex,guser1 dinasaurs
  Group name: dinasaurs
  Description: Prehistoric ones
  GID: 112600007
  Member users: trex, guser1
  Member of groups: animalkingdom
  Indirect Member of group: disneyworld
-------------------------
Number of members added 2
-------------------------
:: [ 01:27:34 ] :: Adding users "trex,guser1" to group dinasaurs successful.
:: [   PASS   ] :: Adding users trex and guser1 to group dinasaurs. (Expected 0, got 0)
'b7389ea5-832b-4488-8522-6f70540241da'
ipa-group-members-002-Add-Nested-User-Memberships result: PASS
   metric: 0
   Log: /var/tmp/beakerlib-42663958/journal.txt

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipa-group-members-003: Verify Group Memberships - Group: disneyworld
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [  BEGIN   ] :: member and memberOf attribute verification :: actually running 'verifyGroupMember epcot group disneyworld'
:: [ 01:27:35 ] :: Verifying Group Member: cn=epcot,cn=groups,cn=accounts,dc=testrelm,dc=test
:: [ 01:27:35 ] :: Member DN: cn=epcot,cn=groups,cn=accounts,dc=testrelm,dc=test
:: [ 01:27:35 ] :: Group DN: cn=disneyworld,cn=groups,cn=accounts,dc=testrelm,dc=test
member: cn=epcot,cn=groups,cn=accounts,dc=testrelm,dc=test
memberOf: cn=disneyworld,cn=groups,cn=accounts,dc=testrelm,dc=test
:: [ 01:27:36 ] :: member and memberOf attributes for group membership are as expected.
:: [   PASS   ] :: member and memberOf attribute verification (Expected 0, got 0)
:: [  BEGIN   ] :: member and memberOf attribute verification :: actually running 'verifyGroupMember animalkingdom group disneyworld'
:: [ 01:27:36 ] :: Verifying Group Member: cn=animalkingdom,cn=groups,cn=accounts,dc=testrelm,dc=test
:: [ 01:27:36 ] :: Member DN: cn=animalkingdom,cn=groups,cn=accounts,dc=testrelm,dc=test
:: [ 01:27:36 ] :: Group DN: cn=disneyworld,cn=groups,cn=accounts,dc=testrelm,dc=test
member: cn=animalkingdom,cn=groups,cn=accounts,dc=testrelm,dc=test
memberOf: cn=disneyworld,cn=groups,cn=accounts,dc=testrelm,dc=test
:: [ 01:27:36 ] :: member and memberOf attributes for group membership are as expected.
:: [   PASS   ] :: member and memberOf attribute verification (Expected 0, got 0)
:: [  BEGIN   ] :: member and memberOf attribute verification :: actually running 'verifyGroupMember wdisney user disneyworld'
:: [ 01:27:37 ] :: Verifying User Member: uid=wdisney,cn=users,cn=accounts,dc=testrelm,dc=test
:: [ 01:27:37 ] :: Member DN: uid=wdisney,cn=users,cn=accounts,dc=testrelm,dc=test
:: [ 01:27:37 ] :: Group DN: cn=disneyworld,cn=groups,cn=accounts,dc=testrelm,dc=test
member: uid=wdisney,cn=users,cn=accounts,dc=testrelm,dc=test
memberOf: cn=disneyworld,cn=groups,cn=accounts,dc=testrelm,dc=test
:: [ 01:27:37 ] :: member and memberOf attributes for group membership are as expected.
:: [   PASS   ] :: member and memberOf attribute verification (Expected 0, got 0)
:: [ 01:27:37 ] :: =====================  group-show ===================
Member groups: epcot, animalkingdom Indirect Member groups: germany, japan, dinasaurs, fish
:: [   PASS   ] :: Checking if group epcot is a direct member of group disneyworld - group-show (Assert: expected 0, got 0)
Member groups: epcot, animalkingdom Indirect Member groups: germany, japan, dinasaurs, fish
:: [   PASS   ] :: Checking if group animalkingdom is a direct member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member groups: germany, japan, dinasaurs, fish
:: [   PASS   ] :: Checking if group fish is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member groups: germany, japan, dinasaurs, fish
:: [   PASS   ] :: Checking if group dinasaurs is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member groups: germany, japan, dinasaurs, fish
:: [   PASS   ] :: Checking if group germany is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member groups: germany, japan, dinasaurs, fish
:: [   PASS   ] :: Checking if group japan is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Member users: wdisney Indirect Member users: guser1, mdolphin, trainer2, guser2, trainer1, euser1, juser2, euser2, trex, juser1
:: [   PASS   ] :: Checking if user wdisney is a directory member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member users: guser1, mdolphin, trainer2, guser2, trainer1, euser1, juser2, euser2, trex, juser1
:: [   PASS   ] :: Checking if user euser1 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member users: guser1, mdolphin, trainer2, guser2, trainer1, euser1, juser2, euser2, trex, juser1
:: [   PASS   ] :: Checking if user euser2 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member users: guser1, mdolphin, trainer2, guser2, trainer1, euser1, juser2, euser2, trex, juser1
:: [   PASS   ] :: Checking if user guser1 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member users: guser1, mdolphin, trainer2, guser2, trainer1, euser1, juser2, euser2, trex, juser1
:: [   PASS   ] :: Checking if user guser2 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member users: guser1, mdolphin, trainer2, guser2, trainer1, euser1, juser2, euser2, trex, juser1
:: [   PASS   ] :: Checking if user juser1 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member users: guser1, mdolphin, trainer2, guser2, trainer1, euser1, juser2, euser2, trex, juser1
:: [   PASS   ] :: Checking if user juser2 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member users: guser1, mdolphin, trainer2, guser2, trainer1, euser1, juser2, euser2, trex, juser1
:: [   PASS   ] :: Checking if user trainer1 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
Indirect Member users: guser1, mdolphin, trainer2, guser2, trainer1, euser1, juser2, euser2, trex, juser1
:: [   PASS   ] :: Checking if user trainer2 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 0)
:: [ 01:27:43 ] :: =====================  group-find ===================
:: [   FAIL   ] :: Checking if group epcot is a direct member of group disneyworld - group-find (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if group animalkingdom is a direct member of group disneyworld - group-find (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if group fish is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if group dinasaurs is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if group germany is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if group japan is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if user wdisney is a direct member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if user euser1 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if user euser2 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if user guser1 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if user guser2 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if user juser1 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if user juser2 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if user trainer1 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
:: [   FAIL   ] :: Checking if user trainer2 is an indirect member of group disneyworld - group-show (Assert: expected 0, got 1)
'f7abae65-67e0-46bd-95a7-40db368a7835'
ipa-group-members-003-Verify-Group-Memberships-Group-disneyworld result: FAIL
   metric: 15
   Log: /var/tmp/beakerlib-42663958/journal.txt



Expected results:
ipa group-find should provide "Member groups", "Member of groups" and "Indirect Member of group" information

Comment 3 Petr Vobornik 2016-07-07 15:09:35 UTC

This will be probably fixed in the same upstream ticket(6026) as bug 1351758.

Comment 4 Petr Vobornik 2016-07-12 08:19:00 UTC

Actually, this was a deliberate change to improve performace. 

The change is that xxx-find commands no longer send member information unless --all option is provided.

https://fedorahosted.org/freeipa/ticket/4995

Comment 5 Petr Vobornik 2016-07-12 08:19:35 UTC

It was one of the performance improvements in 4.4 release.

Comment 6 Petr Vobornik 2016-07-12 15:41:11 UTC

Better description provided in bug 1354626:

"""
This is not a regression but actually a deliberate change.

It was done in scope of upstream ticket:  https://fedorahosted.org/freeipa/ticket/4995

all {object}-find commands were change in a way that they no longer return member information. Reason is that processing members is compute intensive task and with bigger setups the command became very slow. Another issue is that with many objects and members the CLI output becomes unreadable (too many information).

Member can be still obtained if --all option is provided.
"""