[Freeipa-users] anyone know how to do sssd filters?

[KodaK]

On Mon, Dec 17, 2012 at 3:03 PM, Dmitri Pal <dpal at redhat.com> wrote:
> On 12/17/2012 03:11 PM, KodaK wrote:
>> I'm attempting to install Satellite in my IPA domain.  There is a
>> ridiculous requirement that the group "dba" must not already exist
>> prior to installing.  Red Hat support wanted me to *remove* the DBA
>> group and then install.
>>
>> Anyway, I'm trying to play around with filter_groups in sssd, and I
>> can't seem to get it to "take."  The man page isn't exactly clear, but
>> here's what I've tried:
>>
>> filter_groups = dba
>> filter_groups= dba at fqdn
>>
>> In the [domain], [sssd] and [nss] sections of the config file.
>>
>> What's the right syntax?  Do I need it in every section?
>>
> Is it a local group or a central group?

Central group, in IPA.