[Freeipa-users] external groups and /etc/group

[Jakub Hrozek]

On Thu, Sep 29, 2016 at 04:35:58PM -0400, Rusty Shackleford wrote:
> If I create an external group in freeIPA and add a user to that group, does
> that mean if that group exists on a host in /etc/group that the user will
> be a member of that group on that host? I've been trying to achieve that
> result but am failing and I don't know if I'm failing because I
> misunderstand what an external group is for, if I've missed a config option
> somewhere in freeipa or sssd, or if I'm simply using software that is too
> old. I'm using ipa-server-3.0.0-50.el6.centos.2 and sssd-1.13.3-22.el6_8.4
> from the centos 6 updates repo.

I think you are looking for:
    https://sourceware.org/glibc/wiki/Proposals/GroupMerging