IPA doesn't show member attribute for non-authenticated binds
As mentioned this works for older hosts not using SSSD...
Typically users are interested in the correct group list the user is
a
member of.
On the other side, 'ignore_group_members = true' is used often for
performance reasons.
How will this help?
Why do you care about 'getent group' and why don't you
use
"id_provider=ipa"?
getent group, will let me know which user is member of
the group, which again let the user access a specific instance...
We're using it as LDAP server.