[Freeipa-users] issues with secondary groups? (sssd)

[Jakub Hrozek]

On Mon, Mar 02, 2015 at 04:09:34AM -0800, Janelle wrote:
> That was the point. The clients were not installed with IPA client install.
> I have 2000 clients and still working on a simple way to automate the client install with ansible or puppet. Currently just trying to get it working with simple sssd/ldap only auth.

I would recommend against enrolling clients in any other way than with
ipa-client-install.

I've CC-ed James Shubin, who worked on automating client installs with
Puppet (and Puppet-iting IPA in general), I wonder if there's some howto
we can link to?