Re: [Freeipa-users] compat and nested groups for Unix system

2017-03-20 Thread Alexander Bokovoy
On ma, 20 maalis 2017, Iulian Roman wrote: On Mon, Mar 20, 2017 at 4:24 PM, Alexander Bokovoy wrote: On ma, 20 maalis 2017, Iulian Roman wrote: On Mon, Mar 20, 2017 at 4:00 PM, Alexander Bokovoy wrote: On ma, 20 maalis 2017, Iulian Roman wrote:

Re: [Freeipa-users] compat and nested groups for Unix system

2017-03-20 Thread Iulian Roman
On Mon, Mar 20, 2017 at 4:24 PM, Alexander Bokovoy wrote: > On ma, 20 maalis 2017, Iulian Roman wrote: > >> On Mon, Mar 20, 2017 at 4:00 PM, Alexander Bokovoy >> wrote: >> >> On ma, 20 maalis 2017, Iulian Roman wrote: >>> >>> Hello, I noticed

Re: [Freeipa-users] compat and nested groups for Unix system

2017-03-20 Thread Alexander Bokovoy
On ma, 20 maalis 2017, Lukas Slebodnik wrote: On (20/03/17 17:00), Alexander Bokovoy wrote: On ma, 20 maalis 2017, Iulian Roman wrote: Hello, I noticed that nested group feature do not work with the unix ldap clients (AIX) if the default groupbasedn (cn=groups,cn=accounts,dc=...) is used. If

Re: [Freeipa-users] compat and nested groups for Unix system

2017-03-20 Thread Iulian Roman
On Mon, Mar 20, 2017 at 4:00 PM, Alexander Bokovoy wrote: > On ma, 20 maalis 2017, Iulian Roman wrote: > >> Hello, >> >> I noticed that nested group feature do not work with the unix ldap clients >> (AIX) if the default groupbasedn (cn=groups,cn=accounts,dc=...) is used. >>

Re: [Freeipa-users] compat and nested groups for Unix system

2017-03-20 Thread Alexander Bokovoy
On ma, 20 maalis 2017, Iulian Roman wrote: On Mon, Mar 20, 2017 at 4:00 PM, Alexander Bokovoy wrote: On ma, 20 maalis 2017, Iulian Roman wrote: Hello, I noticed that nested group feature do not work with the unix ldap clients (AIX) if the default groupbasedn

Re: [Freeipa-users] compat and nested groups for Unix system

2017-03-20 Thread Lukas Slebodnik
On (20/03/17 17:00), Alexander Bokovoy wrote: >On ma, 20 maalis 2017, Iulian Roman wrote: >> Hello, >> >> I noticed that nested group feature do not work with the unix ldap clients >> (AIX) if the default groupbasedn (cn=groups,cn=accounts,dc=...) is used. If >> i use the cn=compat and change the

Re: [Freeipa-users] compat and nested groups for Unix system

2017-03-20 Thread Alexander Bokovoy
On ma, 20 maalis 2017, Iulian Roman wrote: Hello, I noticed that nested group feature do not work with the unix ldap clients (AIX) if the default groupbasedn (cn=groups,cn=accounts,dc=...) is used. If i use the cn=compat and change the mapping the nested groups are listed properly. Compat tree

[Freeipa-users] compat and nested groups for Unix system

2017-03-20 Thread Iulian Roman
Hello, I noticed that nested group feature do not work with the unix ldap clients (AIX) if the default groupbasedn (cn=groups,cn=accounts,dc=...) is used. If i use the cn=compat and change the mapping the nested groups are listed properly. My question is if it is allowed to mix the compat and