https://bugzilla.redhat.com/show_bug.cgi?id=821907 (Fedora)
Description of problem: When Migrating NIS/LDAP into IPA, the NIS host triples, which are yet to be converted into IPA clients, are automatically put into 'External Host' category. Then after the 'external hosts' are converted into IPA clients one by one with 'ipa-client-install' command, their status in IPA net groups are still 'external hosts'. Version-Release number of selected component (if applicable): 2.1.3-9 How reproducible: Every time. Steps to Reproduce: 1. Get any yet-to-be-converted Linux 6.2 nodes, add them into IPA net groups -- IPA host groups don't accept non IPA hosts --. 2. run 'ipa-client-install' on the clients to convert them into IPA client. 3. double check the clients' status with 'ipa netgroup-find', and they are still in 'external host' category. Actual results: The clients are still 'external host' even after converted. Expected results: Should be automatically turned into 'member hosts'. Additional info: This is a feature request.
This bug can be reproduced in RHEL and has a unfortunate consequence.
as a "externalhost" can never become a "host" after making it a client, we cannot just delete it using command line and we need to delete it manually.
I think it should be reconsidered.
So the proposal is that on host_add (ipa-client-install calls ipa_join, which calls host_add), host_add would search for netgroups for possible external member and if present it would change it into normal member?
ipa-client-install
Basically current method is:
# external.foo.bar is an external member of netgroup 'aa' ipa host-add external.foo.bar ipa netgroup-remove-member aa --hosts external.foo.bar ipa netgroup-add-member aa --hosts external.foo.bar
The above worked for me. Am I missing something?
Thanks. For me the issue was slightly different. Perhaps I should have logged a new ticket.
Impossible to delete the externalhost attribute from a netgroup entry with ipa client tools
I have added the details of the different scenario in an internal comment of the BZ. It seems to be a different bug, not related to ipa-client-install
Metadata Update from @dpal: - Issue assigned to someone - Issue set to the milestone: Ticket Backlog
Thank you taking time to submit this request for FreeIPA. Unfortunately this bug was not given priority and the team lacks the capacity to work on it at this time.
Given that we are unable to fulfil this request I am closing the issue as wontfix. To request re-consideration of this decision please reopen this issue and provide additional technical details about its importance to you.
Metadata Update from @rcritten: - Issue close_status updated to: wontfix - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.