Re: [Freeipa-users] AD Primary Groups are ignored in FreeIPA?

2016-05-17 Thread Simpson Lachlan
> -Original Message- > From: freeipa-users-boun...@redhat.com [mailto:freeipa-users- > boun...@redhat.com] On Behalf Of Alexander Bokovoy > Sent: Monday, 16 May 2016 11:46 PM > To: Lachlan Musicman > Cc: freeipa-users@redhat.com > Subject: Re: [Freeipa-users] AD Prima

Re: [Freeipa-users] AD Primary Groups are ignored in FreeIPA?

2016-05-17 Thread Alexander Bokovoy
On Tue, 17 May 2016, Simpson Lachlan wrote: >I feel like it would be an obvious need - to translate or override AD >primary groups to FreeIPA groups, but this doesn't seem possible. There is only one primary group for a user. For Kerberos operations we currently don't take ID overrides into

Re: [Freeipa-users] AD Primary Groups are ignored in FreeIPA?

2016-05-17 Thread Simpson Lachlan
> -Original Message- > From: freeipa-users-boun...@redhat.com [mailto:freeipa-users- > boun...@redhat.com] On Behalf Of Martin Kosek > Sent: Monday, 16 May 2016 11:28 PM > To: Lachlan Musicman; freeipa-users@redhat.com > Subject: Re: [Freeipa-users] AD Primary Groups are

Re: [Freeipa-users] AD Primary Groups are ignored in FreeIPA?

2016-05-16 Thread Alexander Bokovoy
On Mon, 16 May 2016, Lachlan Musicman wrote: Hola, We have an interesting scenario that is hard to find any information on. Due to permission restrictions, a NAS that is mounted and visible by both AD and 'nix clients, every user belongs to a particular primary group. What scope these primary

Re: [Freeipa-users] AD Primary Groups are ignored in FreeIPA?

2016-05-16 Thread Jakub Hrozek
On Mon, May 16, 2016 at 03:27:39PM +0200, Martin Kosek wrote: > On 05/16/2016 05:28 AM, Lachlan Musicman wrote: > > Hola, > > > > We have an interesting scenario that is hard to find any information on. > > > > Due to permission restrictions, a NAS that is mounted and visible by both > > AD and

Re: [Freeipa-users] AD Primary Groups are ignored in FreeIPA?

2016-05-16 Thread Martin Kosek
On 05/16/2016 05:28 AM, Lachlan Musicman wrote: > Hola, > > We have an interesting scenario that is hard to find any information on. > > Due to permission restrictions, a NAS that is mounted and visible by both AD > and > 'nix clients, every user belongs to a particular primary group. > >

[Freeipa-users] AD Primary Groups are ignored in FreeIPA?

2016-05-15 Thread Lachlan Musicman
Hola, We have an interesting scenario that is hard to find any information on. Due to permission restrictions, a NAS that is mounted and visible by both AD and 'nix clients, every user belongs to a particular primary group. When we try doing idoverride's on the groups, it fails with the Primary