Adam Young wrote:
On 07/15/2010 09:15 AM, Rob Crittenden wrote:
Adam Young wrote:
On 07/14/2010 07:52 PM, Dmitri Pal wrote:
Adam Young wrote:
On 07/14/2010 03:43 PM, Rob Crittenden wrote:
The netgroup plugin was using the wrong attribute for memberships. It
needs to use memberuser for users and groups and memberhost for hosts
and hostgroups. I fixed this up and corrected the tests as well.


Freeipa-devel mailing list

Got it installed and running. Unclear how to test.

Create a user group with 3 users U1 U2 U3. Create a host group with the
two hosts H 1 H2
Create a netgroup that includes this user group and this host group
Configure client to use your IPA server as a source of the netgroups
Lits the netgoups - should get your netgroup
List the contents of the netgroup. You should get triplets: user, host,
The order of the users and hosts in triplets does not matter. What
matters is that each host and each user are listed in some triplet and
generally present in the netgroup not more than once.


Freeipa-devel mailing list

Here's my script. ypcat stopped working with

No such map netgroup. Reason: Can't communicate with portmapper

Too tired to debug tonight/

ipa user-add --first=Kermit --last=Frog kfrog
ipa user-add --first=Count --last=VonCount count123
ipa user-add --first=Oscar --last=Grouch scram

ipa user-add --first=Elmo --last=Gonzales elmo
ipa user-add --first=Zoe --last=MacPhearson zoe
ipa user-add --first=Prairie --last=Dawn pdawn

ipa group-add --desc="Monsters on Sesame Street" monsters
ipa group-add --desc="Muppets moonlighting for CTW" muppets

ipa group-add-member --users=kfrog,scram,pdawn muppets
ipa group-add-member --users=count123,elmo,zoe monsters

ipa netgroup-add --desc="staging servers" net-stage
ipa netgroup-add --desc="live servers" net-live

ipa hostgroup-add --desc "Live servers" host-live
ipa hostgroup-add --desc "Staging servers" stage-live

ipa hostgroup-add-member --hosts,, host-live
ipa hostgroup-add-member --hosts,, host-stage

ipa netgroup-add-member --groups=muppets --hostgroups=host-live net-live
ipa netgroup-add-member --groups=muppets --hostgroups=host-stage net-stage

ypcat -d -h netgroup

Ok, kudos on the big test group but your knowledge of Sesame Street characters last names is a bit disturbing ;-)

Your ypcat command is wrong. The -d is your NIS domain (same as your IPA domain) and the -h is the host to connect to.

I get the following output with this data set:

(-,kfrog, (-,scram, (-,pdawn,
(-,kfrog, (-,scram, (-,pdawn,

Based on my limited understanding of netgroups this looks correct. You have defined two netgroups, both of which have the same user group as a member. The first netgroup has no hosts or hostgroups associated with it, the second has an empty hostgroup (because you added non-existent hosts, or at least hosts not on my box).

I added a host to host-live and now I get:

(-,kfrog, (-,scram, (-,pdawn,
(,kfrog, (-,scram, (-,pdawn,


pushed to master

Freeipa-devel mailing list

Reply via email to