On Tuesday, May 11, 2021, 5:31 PM, John Desantis <desantis@mail.usf.edu> wrote:
Iulian,> So, only after I run getent group <group_name> on the ipa clients I can list the user attributes.This sounds somewhat similar to behavior I ran into initially in ourdevelopment deployment. For the users that aren't immediately able tobe resolved on the clients, are they mapped to any IdM POSIX group viaan external membership? For example: ad_user_group_external is mappedto ad_user_group as an external member?HTH,John DeSantisIl giorno mar 11 mag 2021 alle ore 11:10 iulian roman viaFreeIPA-users <freeipa-users@lists.fedorahosted.org> ha scritto:>> That was a good hint ! Actually it does return the gid when I run getent group <group_name> . And after I run the getent group <group_name> on the client side, I can run as well id <user_name> . So, only after I run getent group <group_name> on the ipa clients I can list the user attributes.> Any idea what needs to be changed in order to have that working without that workaround (obviously i cannot do that for hundred users and thousand clients) ?> _______________________________________________> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure