On Fri, Oct 31, 2014 at 02:36:54PM +0100, Pavel Březina wrote:
AFAIK all group object in IPA has ipaUserGroup object class so it should be
general enough to cover all type of groups but excluding roles.
Are you sure, even with non-POSIX groups, POSIX groups and user private
groups (I haven't tested all three, I'm mostly asking..)