[Freeipa-devel] Adding groups broken?

[W. Michael Petullo]

I am having trouble adding groups using ipa-server-1.1.0-4.fc9.i386.  
I added a group, mygroup, using the web interface. However, my user  
is not a member of the group when I log in.

"getent group" says:

mock:x:490:user
[...]
mygroup:*:1100:user

"groups" reports that I am a member of mock, but not mygroup.

Why is '*' used for IPA groups, while 'x' is used by /etc/group?

If I manually add mygroup to /etc/group and use 'x', then my user  
gets added to mygroup.

--
Mike