There is active development on the puppet-ipaclient module . You should see a new release in the next few days that adds better support for ipa4, exposes sssd options and more.
 https://forge.puppetlabs.com/stbenjam/ipaclient We will be using this module to automate the client install on a group of ~500 RHEL servers. Thanks, Josh > -----Original Message----- > From: freeipa-users-boun...@redhat.com [mailto:freeipa-users- > boun...@redhat.com] On Behalf Of Jakub Hrozek > Sent: Monday, March 02, 2015 7:26 AM > To: Janelle > Cc: James Shubin; email@example.com > Subject: Re: [Freeipa-users] issues with secondary groups? (sssd) > > On Mon, Mar 02, 2015 at 04:09:34AM -0800, Janelle wrote: > > That was the point. The clients were not installed with IPA client install. > > I have 2000 clients and still working on a simple way to automate the client > install with ansible or puppet. Currently just trying to get it working with > simple sssd/ldap only auth. > > I would recommend against enrolling clients in any other way than with ipa- > client-install. > > I've CC-ed James Shubin, who worked on automating client installs with > Puppet (and Puppet-iting IPA in general), I wonder if there's some howto > we can link to? > > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go To http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project