> On 9 Aug 2017, at 17:21, Steve Weeks via FreeIPA-users > <freeipa-users@lists.fedorahosted.org> wrote: > > I can use 'id ad_user@ad_domain' command to see what groups an ad_user is a > member of. > > Is there a way from the Linux command line to see who are the member of > some_ad_group@ad_domain are? >
getent group some_ad_group@ad_domain But please note that the getent group output is not guaranteed to be 100% correct. For starters, sssd has a limit on how many nesting levels it would traverse, so if a member you’re looking for is very deep in the nesting hierarchy, it won’t be displayed (unless you tune the nesting limit..) > Thanks, > Steve > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org _______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
