Chapter 8. Important user and group account information for Active Directory accounts

All user and group accounts must be local accounts. This is to ensure that there are no authentication conflicts between local accounts on your Satellite Server and accounts in your Active Directory domain.

Your system is not affected by this conflict if your user and group accounts exist in both /etc/passwd and /etc/group files. For example, to check if entries for puppet, apache, foreman and foreman-proxy groups exist in both /etc/passwd and /etc/group files, enter the following commands:

grep 'puppet\|apache\|foreman\|foreman-proxy' /etc/passwd /etc/group

# grep 'puppet\|apache\|foreman\|foreman-proxy' /etc/passwd /etc/group