<html> <head> <meta http-equiv="content-type" content="text/html; charset=windows-1252"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-forward-container">Hi all, One motivation: the customer demands like this... Also: ignore Windows specific group info which is not important for the Linux domain Also: too much groups! If it's a sssd thing, this might be solved on the IPA-server as well since getting the AD group info is handles by sssd on the IPA-server, right? Anyway: how to handle this issue? Kind regards, Winny <div class="moz-cite-prefix">Op 23-11-15 om 10:54 schreef Martin Kosek: </div> <blockquote cite="mid:5652E23B.50308@redhat.com" type="cite"> <pre wrap="">On 11/23/2015 10:50 AM, Winfried de Heiden wrote: </pre> <blockquote type="cite"> <pre wrap="">Hi all, For some reason, we only want to use the Active Directory user from an Active Directory using a Trust. (groups like "Domain Users" are of no use...) Is it possible to ignore (hide) ALL groups from a particular Domain (trust)/ Kinds Regards, Winny </pre> </blockquote> <pre wrap="">This looks as a question for the client part (SSSD). I do not fully understand the use case, you want to allow AD user to authenticate to Linux box, but you do not want the Linux box to see any of the AD groups? What is the motivation, if I may ask? </pre> </blockquote> </div> </body> </html>