topic FreeIPA [LDAP] group integration in General Topics

FreeIPA [LDAP] group integration

TomaszLubas — Mon, 18 Jul 2016 16:42:59 GMT

Hello, anybody has experience with user group integration with FreeIPA ldap server?

I have tried many different settings with no success. With some settings i can see groups but they seems to be empty.

show user group list - shows proper groups, but

show user group name some_group_name - shows nothing but

source type: service
source: LDAP_profile_name

debug user-id reset group-mapping - doesn't help

Any advices ?

Tomek

Re: FreeIPA [LDAP] group integration

BPry — Mon, 18 Jul 2016 16:53:54 GMT

We had this issue a while back and found that the setup wasn't actively pulling in new users anymore but since the groups were cached then those were still showing up. Create a new group and wait until your refresh rate would have hit on it and see if it pulls in the new group. If the newely created group shows up then you can rule out a direct access error and start looking at the access that your device actually has with LDAP bindings.