On Mon, Mar 23, 2015 at 02:23:52PM +0530, Yogesh Sharma wrote: > Sure Jakub. ++FreeIPA-Users > > "getent netgroup" not working on IPA Server > > [root@mipa ~]# getent netgroup stg.initd.com > [root@mipa ~]# > > > > [root@mipa ~]# ipa hostgroup-show cipa-servers > Host-group: cipa-servers > Description: cipa > Member hosts: cipa.stg.initd.com > Member of netgroups: stg.initd.com > > [root@mipa ~]# ipa netgroup-show stg.initd.com > Netgroup name: stg.initd.com > Description: ss > NIS domain name: stg.initd.com > Member Group: admins, ipausers, masteruser, trust admins, webuser > Member Hostgroup: sipa-servers, cipa-servers > > However, I re-register the IPA Client and I am able to query netgroup, > Though it does not shows cipa.stg.initd.com whereas IPA Server query "ipa > netgroup-show stg.initd.com" has it in list. > > [root@cipa ~]# getent passwd admin > admin:*:1170400000:1170400000:Administrator:/home/admin:/bin/bash > [root@cipa ~]# getent netgroup stg.initd.com > stg.initd.com (sipa.stg.initd.com,-,stg.initd.com) > [root@cipa ~]#
OK, then we need to see the SSSD logs, but if the client suddently started working, then I suspect some networking issues. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
