IPA intergration - Groups are empty

TrueNAS General
1

I wanted to consolidate my permissions for my NFS shares by adding users to groups. I added the users to groups in freeIPA, refreshed the database cache in TrueNAS, the group appears but no users are a member of it. Manually querying LDAP confirms the users are in the group


dn: cn=media_writer,cn=groups,cn=accounts,dc=corkery,dc=cloud
cn: media_writer

…

member: uid=radarr,cn=users,cn=accounts,dc=corkery,dc=cloud
member: uid=sonarr,cn=users,cn=accounts,dc=corkery,dc=cloud
member: uid=sabnzbd,cn=users,cn=accounts,dc=corkery,dc=cloud

Is there something I am missing and need to enable or is this a bug? Thanks

2

Not a bug. The API responses for group.query are expected to give an array of IDs from the users table primary keys (which doesn’t make sense for directory services), so it’s empty. If you see proper output from id <username> then all is good.

1 Like
LDAP users cannot log in via ssh key
3

Don’t know why I didn’t think to check id but yes everything is listed properly in there. Was having issues with NFS permission issues with Kerberos so wasn’t sure if the groups were taking. After refreshing my TGT it appears everything works correctly now.

Thank you!