As of yet I haven't tried using the json rpc with a cft.  freeipa is on its
own.  i'll give it a try and if it doesn't work this will point me in the
right direction.


On Sat, Mar 18, 2017 at 2:27 AM Alexander Bokovoy <>

> On pe, 17 maalis 2017, Marc Boorshtein wrote:
> >I've got the api integrated for all local users and am looking at if
> >there are any differences between that and if my ipa domain is in a
> >CFT with an AD domain.  Right now I'm using "group_add_member", should
> >that work for users coming from a trusted forest as well?
> EPARSE, but I'll try to understand what are you trying to achieve.
> If you were using
>    ipa group-add-member external_group --external user@AD.DOMAIN
> to add AD users as external members of a group, you continue using the
> same command on API level:
>    api.Command.group_add_member(u'external_group',
> external=u'user@AD.DOMAIN'})
> Same with JSON-RPC.
> --
> / Alexander Bokovoy
Marc Boorshtein
CTO Tremolo Security
(703) 828-4902
Twitter - @mlbiam / @tremolosecurity
Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to