22.6. Adding a member to a user group using IdM CLI

Prerequisites

• You must be logged in as the administrator. For details, see Using kinit to log in to IdM manually.

Procedure

• Add a member to a user group by using the ipa group-add-member command.

  Specify the type of member using these options:

  • --users adds an IdM user
  • --external adds a user that exists outside the IdM domain, in the format of DOMAIN\user_name or user_name@domain
  • --groups adds an IdM user group

  For example, to add group_b as a member of group_a:

  $ ipa group-add-member group_a --groups=group_b
  Group name: group_a
  GID: 1133400009
  Member users: user_a
  Member groups: group_b
  Indirect Member users: user_b
  -------------------------
  Number of members added 1
  -------------------------

  Members of group_b are now indirect members of group_a.

  重要

  When adding a group as a member of another group, do not create recursive groups. For example, if Group A is a member of Group B, do not add Group B as a member of Group A. Recursive groups can cause unpredictable behavior.

  注意

  After you add a member to a user group, the update may take some time to spread to all clients in your Identity Management environment. This is because when any given host resolves users, groups and netgroups, the System Security Services Daemon (SSSD) first looks into its cache and performs server lookups only for missing or expired records.