Re: [Freeipa-users] Netgroups and users

2011-12-14 Thread Sigbjorn Lie
On 12/13/2011 11:50 PM, Simo Sorce wrote: On Tue, 2011-12-13 at 23:15 +0100, Sigbjorn Lie wrote: IPA uses internal schema for netgroups to take advantage of some of the associations and exposes 2307bis schema for netgroups via compat plugin. Are you pointing clients at compat tree? Yes. The

Re: [Freeipa-users] Netgroups and users

2011-12-13 Thread Sigbjorn Lie
On 12/13/2011 10:50 PM, Sigbjorn Lie wrote: Hi, When adding users or user groups to a netgroup, the format of the netgrouptriple ends up as following: nisNetgroupTriple: (-,username,ix.test.com) The extra - prevents me from using IPA's netgroups for tcp wrappers using /etc/hosts.allow and

Re: [Freeipa-users] Netgroups and users

2011-12-13 Thread Dmitri Pal
On 12/13/2011 04:50 PM, Sigbjorn Lie wrote: Hi, When adding users or user groups to a netgroup, the format of the netgrouptriple ends up as following: nisNetgroupTriple: (-,username,ix.test.com) The extra - prevents me from using IPA's netgroups for tcp wrappers using /etc/hosts.allow and

Re: [Freeipa-users] Netgroups and users

2011-12-13 Thread Sigbjorn Lie
On 12/13/2011 11:01 PM, Dmitri Pal wrote: On 12/13/2011 04:50 PM, Sigbjorn Lie wrote: Hi, When adding users or user groups to a netgroup, the format of the netgrouptriple ends up as following: nisNetgroupTriple: (-,username,ix.test.com) The extra - prevents me from using IPA's netgroups for

Re: [Freeipa-users] Netgroups and users

2011-12-13 Thread Simo Sorce
On Tue, 2011-12-13 at 23:15 +0100, Sigbjorn Lie wrote: IPA uses internal schema for netgroups to take advantage of some of the associations and exposes 2307bis schema for netgroups via compat plugin. Are you pointing clients at compat tree? Yes. The netgroups are exposed, they just had an