[Freeipa-users] Active Directory Trust = filter users

[Jakub Hrozek]

On Tue, Feb 09, 2016 at 11:58:46AM +0100, Winfried de Heiden wrote:
>    Hi all,
> 
>    Using an Active Directory Trust with IPA all works fine but there's an
>    disadvantage: it might brong in lots and lots of groups I am not
>    interested in since it mainly hit Windows and/or Office stuff.

Why are you concerned about this in the first place? Is it about
performance needed to process these groups or about resources that can
be owned by these groups?

> 
>    Now, is it possible to filter AD-groups? or: can I use an AD search base
>    filter? (something like cn=linuxgroups,ou=allgroups,dc=example,dc=com)

Not at the moment, the subdomains are autoconfigured and not
configurable.

> 
>    On a small scale ID views can be used, but it not a great solution. (for
>    all new groups appearing in AD the ID view must be modified)
> 
>    Some sugestions or documentation on filtering AD groups?
> 
>    Winny

> -- 
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project