Never mind, I see this is a known bug in 4.2.x fixed in 4.3.1 When I am allowed to upgrade my servers I'll try again. I guess the workaround is to use CLI with -gid (which kind of defeats the the purpose of the autogroup for me)
Thanks for listening to my rant! Larry
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project