[Freeipa-users] anyone know how to do sssd filters?

[Dmitri Pal]

On 12/17/2012 03:11 PM, KodaK wrote:
> I'm attempting to install Satellite in my IPA domain.  There is a
> ridiculous requirement that the group "dba" must not already exist
> prior to installing.  Red Hat support wanted me to *remove* the DBA
> group and then install.
>
> Anyway, I'm trying to play around with filter_groups in sssd, and I
> can't seem to get it to "take."  The man page isn't exactly clear, but
> here's what I've tried:
>
> filter_groups = dba
> filter_groups= dba at fqdn
>
> In the [domain], [sssd] and [nss] sections of the config file.
>
> What's the right syntax?  Do I need it in every section?
>
Is it a local group or a central group?

-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/