Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
DescriptionVarun Mylaraiah
2023-03-01 05:53:11 UTC
+++ This bug was initially created as a clone of Bug #2174309 +++
Description of problem:
The external group add fails while adding with members in the group module.
However, the group and its members were added. Additionally, I tested it on the CLI but I did not see any error.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
root@master ~]# ipa group-show testexternal
ipa: ERROR: testexternal: group not found
---
- name: Playbook to ensure a external group is present with members
hosts: ipaserver
become: true
tasks:
# Create group
- ipagroup:
ipaadmin_password: <xxxxxxx>
name: testexternal
external: yes
- ipagroup:
ipaadmin_password: <xxxxxxx>
name: testexternal
action: member
user: gmm_user01
PLAYBOOK: external_group_with_members.yaml ********************************************************************
1 plays in external_group_with_members.yaml
PLAY [Playbook to ensure a external group is present with members] ********************************************
TASK [Gathering Facts] ****************************************************************************************
task path: /root/external_group_with_members.yaml:2
ok: [master.ipadomain.test]
META: ran handlers
TASK [ipagroup] ***********************************************************************************************
task path: /root/external_group_with_members.yaml:8
changed: [master.ipadomain.test] => {"changed": true}
TASK [ipagroup] ***********************************************************************************************
task path: /root/external_group_with_members.yaml:12
fatal: [master.ipadomain.test]: FAILED! => {"changed": false, "msg": "group_add_member: testexternal: Cannot perform external member validation without Samba 4 support installed. Make sure you have installed server-trust-ad sub-package of IPA on the server"}
PLAY RECAP ****************************************************************************************************
master.ipadomain.test : ok=2 changed=1 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
**Group "testexternal" and its members "gmm_user01" were added**
[root@master ~]# ipa group-show testexternal --all
dn: cn=testexternal,cn=groups,cn=accounts,dc=ipadomain,dc=test
Group name: testexternal
Member users: gmm_user01
ipauniqueid: 3e42bd6a-b328-11ed-bc82-fa163e349009
objectclass: top, groupofnames, nestedgroup, ipausergroup, ipaobject,
ipaexternalgroup
Actual results:
FAILED! => {"changed": false, "msg": "group_add_member: testexternal: Cannot perform external member validation without Samba 4 support installed. Make sure you have installed server-trust-ad sub-package of IPA on the server"}
Expected results:
Group should add without error.
Additional info:
CLI console output:
[root@master ~]# ipa group-show testexternal
ipa: ERROR: testexternal: group not found
[root@master ~]# ipa group-add testexternal --external
--------------------------
Added group "testexternal"
--------------------------
Group name: testexternal
[root@master ~]# ipa group-add-member testexternal --users=gmm_user01
Group name: testexternal
Member users: gmm_user01
-------------------------
Number of members added 1
-------------------------
[root@master ~]# ipa group-show testexternal --all
dn: cn=testexternal,cn=groups,cn=accounts,dc=ipadomain,dc=test
Group name: testexternal
Member users: gmm_user01
ipauniqueid: 26c22e2a-b32b-11ed-8139-fa163e349009
objectclass: top, groupofnames, nestedgroup, ipausergroup, ipaobject,
ipaexternalgroup