ipa sudorule-add-user SUDORULE-NAME doesn't support multiple groups

[Alexandre Pitre]

Hi,

I noticed that on FreeIPA 4.5.0 on CentOS I can't specify multiple groups
with the sudorule-add-user command.

Example:

ipa sudorule-add-user sudorule --groups=group1,group2

Failed users/groups:
    member user:
    member group: group1,group2
-------------------------
Number of members added 0
-------------------------

Other similar ipa commands support multiple groups just fine.

Is this normal ?

Thanks,
Alex

[Rob Crittenden]

Alexandre Pitre via FreeIPA-users wrote:
> Hi,
>
> I noticed that on FreeIPA 4.5.0 on CentOS I can't specify multiple
> groups with the sudorule-add-user command.
>
> Example:
>
> ipa sudorule-add-user sudorule --groups=group1,group2
>
> Failed users/groups:
>     member user:
>     member group: group1,group2
> Number of members added 0
>
> Other similar ipa commands support multiple groups just fine.
>
> Is this normal ?

CSV hasn't been supported for quite a long time. I'd be curious where it
is still working.

You can do let bash expand it instead:

ipa sudorule-add-user sudorule --groups={group1,group2}

rob

[Alexandre Pitre]

Would you look at that! Problem solved.Thanks.

On Tue, Oct 24, 2017 at 12:08 PM, Rob Crittenden 
wrote:
> Alexandre Pitre via FreeIPA-users wrote:
> > Hi,
> >
> > I noticed that on FreeIPA 4.5.0 on CentOS I can't specify multiple
> > groups with the sudorule-add-user command.
> >
> > Example:
> >
> > ipa sudorule-add-user sudorule --groups=group1,group2
> >
> > Failed users/groups:
> >     member user:
> >     member group: group1,group2
> > Number of members added 0
> >
> > Other similar ipa commands support multiple groups just fine.
> >
> > Is this normal ?
>
> CSV hasn't been supported for quite a long time. I'd be curious where it
> is still working.
>
> You can do let bash expand it instead:
>
> ipa sudorule-add-user sudorule --groups={group1,group2}
>
> rob