<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">I don't believe that the attribute is an OU.<div><br></div><div>try performing a:</div><div><br></div><div>ipa group-show engineering --all --raw</div><div><br></div><div>I believe that your automember rule wants to be cn=^Engineering</div><div><br><div apple-content-edited="true">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">"You cannot hope to secure that which you do not first understand"<br>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~<br>Jr Aquino<br>Manager Operation Services, Infrastructure and Application Security</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">GXPN | GIAC Exploit Researcher and Advanced Penetration Tester</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">GCIH | GIAC Certified Incident Handler<br>GWAPT | GIAC WebApp Penetration Tester<br><br>Citrix Systems, Inc | 7408 Hollister Avenue | Goleta, CA 93117</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">SaaS Division<br>T: +1 805.690.3478<br><a href="mailto:jr.aquino@citrix.com">jr.aquino@citrix.com</a><br>http://www.citrix.com</div></div>
</div>
<br><div><div>On Apr 30, 2014, at 2:10 PM, Dimitar Georgievski <<a href="mailto:mitkany@gmail.com">mitkany@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><div dir="ltr">Hi,<div><br></div><div>I am trying to create rules to place users in given user groups based on the value of their ou (Organization Unit) field in their profiles. For some reason it is not working, and I am trying to understand why. </div>
<div><br></div><div>The rule is very simple and looks like this</div><div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
ipa automember-find engineering<br>Grouping Type: group<br>---------------<br>1 rules matched<br>---------------<br> Description: Add automatically Engineering users to engineering User Group<br> Automember Rule: engineering<br>
Inclusive Regex: ou=^Engineering</blockquote><div><br></div><div>With this rule in place I would expect all the new users with ou=Engineering to be automatically placed in the engineering user group.</div><div><br></div>
<div>I am using FreeIPA v3.0.0 on CentOS 6.5 </div><div><br></div><div>Thanks</div><div><br></div><div>Dimitar </div></div></div>
_______________________________________________<br>Freeipa-users mailing list<br><a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br>https://www.redhat.com/mailman/listinfo/freeipa-users</blockquote></div><br></div></body></html>