#8819 freeipa con't parse netgroup
Closed: wontfix 2 years ago by pcech. Opened 2 years ago by micheal.

Request for enhancement

As <persona, e.g. admin> , I want <what?> so that <why?>.

Issue

[description of the issue]
create a netgroup netgroup1
add user1 and user2
then add host1 host2
expect four netgroup record in netgroup1:
host1,user1,example. com
host1,user2,example. com
host2,user1,example. com
host2,user2,example. com
but when i use ldap commd search the result, only two record:
host1,user1,example. com
host2,user2,example. com
so I think this is a bug

Steps to Reproduce

1.
2.
3.

Actual behavior

(what happens)

Expected behavior

(what do you expect to happen)

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server

Additional info:

Any additional information, configuration, data or log snippets that is needed for reproduction or investigation of the issue.

Log file locations: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/config-files-logs.html
Troubleshooting guide: https://www.freeipa.org/page/Troubleshooting


freeipa version is 4. 8.7

We don't recommend mixing users and hosts in the same netgroup.

What's the use-case?

but when I use command: getent netgroup netgroup1,I got four record,
use case is when I add user and host I think I will got n*m record,and I didn't find any desc and limit for this operate

I doubt it's documented but I recall 10+ years ago we chose to not do this because we couldn't find a use case to justify the effort. The netgroup triples are calculated on-the-fly.

Describing what you expect is not the same as why you need this, particularly to have users and hosts in the same netgroup, and why it can't be done another way.

when i add a usergroup to netgroup,only first user can access?

Thank you taking your time and submitting this issue. I am afraid that based on last rcritten's comment, I am about to close this issue.

FreeIPA Product Owner.

Metadata Update from @pcech:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata