Bug 803052 - AD Users synced to IPA server are not added to "ipausers" group
Summary: AD Users synced to IPA server are not added to "ipausers" group
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: doc-Identity_Management_Guide
Version: 6.2
Hardware: All
OS: Linux
unspecified
low
Target Milestone: rc
: 6.3
Assignee: Deon Ballard
QA Contact: ecs-bugs
URL:
Whiteboard:
Depends On: 785201
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-03-13 21:07 UTC by Dmitri Pal
Modified: 2012-06-21 23:12 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 785201
Environment:
Last Closed: 2012-06-21 23:12:50 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Comment 2 Martin Kosek 2012-03-14 07:28:31 UTC 
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2518


The following procedure will create an automember rule which would enroll all new users replicated via AD winsync replication:

# ipa automember-add --type=group ipausers
# ipa automember-add-condition ipausers --key=objectclass --type=group --inclusive-regex=ntUser
Comment 4 Deon Ballard 2012-04-17 16:04:04 UTC 
Link:
http://documentation-stage.bne.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Identity_Management_Guide/using-automembers-examples.html#automember-winsync
Comment 6 Deon Ballard 2012-06-21 23:12:50 UTC 
Closing.
Note You need to log in before you can comment on or make changes to this bug.