On pe, 17 maalis 2017, Marc Boorshtein wrote:
I've got the api integrated for all local users and am looking at if there are any differences between that and if my ipa domain is in a CFT with an AD domain. Right now I'm using "group_add_member", should that work for users coming from a trusted forest as well?
EPARSE, but I'll try to understand what are you trying to achieve.
If you were using ipa group-add-member external_group --external user@AD.DOMAIN
to add AD users as external members of a group, you continue using the same command on API level: api.Command.group_add_member(u'external_group', external=u'user@AD.DOMAIN'}) Same with JSON-RPC. -- / Alexander Bokovoy -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project