43.6. Removing IdM host group members using the CLI

Prerequisites

• Administrator privileges for managing IdM or User Administrator role.
• An active Kerberos ticket. For details, see Using kinit to log in to IdM manually.
• Optional. Use the ipa hostgroup-find command to confirm that the group includes the member you want to remove.

Procedure

• To remove a host group member, use the ipa hostgroup-remove-member command and provide the relevant information. You can specify the type of member to remove using these options:

  • Use the --hosts option to remove one or more hosts from an IdM host group.

    For example, to remove the host named example_member from the group named group_name:

    $ ipa hostgroup-remove-member group_name --hosts example_member
    Host-group: group_name
    Description: My host group
    -------------------------
    Number of members removed 1
    -------------------------

  • Use the --hostgroups option to remove one or more host groups from an IdM host group.

    For example, to remove the host group named nested_group from the group named group_name:

    $ ipa hostgroup-remove-member group_name --hostgroups example_member
    Host-group: group_name
    Description: My host group
    -------------------------
    Number of members removed 1
    -------------------------

    참고

    Removing a group does not delete the group members from IdM.

  • You can remove multiple hosts and multiple host groups from an IdM host group in one single command using the following syntax:

    $ ipa hostgroup-remove-member group_name --hosts={host1,host2} --hostgroups={group1,group2}