You can add a group to a group in the UI but not with ipa-groupmod. The command-line needs to be functionally equivalent.
Created attachment 296233 [details] allow groups to be added as a group member
Committed in changeset 709
works in cmd line as well. [root@ipaqa01 ~]# ipa-modgroup -g "small group" "big group" small group successfully added to big group [root@ipaqa01 ~]# ipa-findgroup "big group" 5 entries were found. Which one would you like to display? 1: admins 2: ipausers 3: group1 4: big group 5: small group Choose one: (1 - 5), 0 for all, q to quit: 4 dn: cn=big group,cn=groups,cn=accounts,dc=dsqa,dc=sjc2,dc=redhat,dc=com GID: 1104 Full Name: big group Description: big group Members: small group: cn=small group,cn=groups,cn=accounts,dc=dsqa,dc=sjc2,dc=redhat,dc=com [root@ipaqa01 ~]# build - ipa-server-0.99-23.767.20080402.el5ipa marking bug verified.