On 9 Aug 2017, at 17:21, Steve Weeks via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org> wrote:
I can use 'id ad_user@ad_domain' command to see what groups an ad_user is a
member of.
Is there a way from the Linux command line to see who are the member of
some_ad_group@ad_domain are?
getent group some_ad_group@ad_domain
But please note that the getent group output is not guaranteed to be 100% correct. For
starters, sssd has a limit on how many nesting levels it would traverse, so if a member
you’re looking for is very deep in the nesting hierarchy, it won’t be displayed (unless
you tune the nesting limit..)
Thanks,
Steve
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org