Hi Luiz,

Would you please verify your settings in: 
System Preferences > Users & Groups > Login Options > Network Account Server > Directory Utility > Services > LDAP > Your LDAP server > Search & Mappings
There should be a Record Type called 'Groups' with an attribute 'PrimaryGroupID' that is mapped to 'gidNumber.' 


On Mon, Jul 24, 2017 at 5:16 PM, Luiz Garrido ALKEMY X via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hi,

We have an environment with mixed OSX and CentOS computers and IPA is
working great for almost everything.

The only problem that we have (besides the known ones) is that the IPA
user logged to an OSX computer is not getting group information. Logged
to a CentOS, the `id` command shows all the groups assigned to the user
but running the same command on an OSX under the same user, the groups
are different, mainly Apple groups and not our IPA groups. Does anyone
had this problem?

So, because of this, ACL permissions on our NFS server is not working
for OSX machines, but are working great for CentOS ones.


Thanks!

Luiz Garrido


_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org



--

Jason Sherrill
IT Specialist
mobile: 412-636-2073
office: 412-362-0201