Question about NS sssd module list commands

Support
1

NethServer Version: 7.6.1810
Module: nethserver-sssd-1.4.8-1.ns7.noarch

According to this, Nethserver has two commands to list AD info, being:


1. /usr/libexec/nethserver/list-users

2. /usr/libexec/nethserver/list-groups

This commands print a json like this:

/usr/libexec/nethserver/list-groups
{
    "group1@local.domain.cu": {
        "members": []
    },
    "group1@local.domain.cu": {
        "members": []
    },
    "group2@local.domain.cu": {
        "members": []
    },
    "group3@local.domain.cu": {
        "members": []
    }
}

And like this

{
    "user1@local.domain.cu": {
        "locked": 0,
        "gecos": "Full User Name 1",
        "expired": 0,
        "groups": [],
        "shell": "/usr/libexec/openssh/sftp-server",
        "new": 0,
        "expires": "no"
    },
    "user2@local.domain.cu": {
        "locked": 0,
        "gecos": "Full User Name 2",
        "expired": 0,
        "groups": [],
        "shell": "/usr/libexec/openssh/sftp-server",
        "new": 0,
        "expires": "no"
    },
    "user3@local.domain.cu": {
        "locked": 0,
        "gecos": "Full User Name 3",
        "expired": 0,
        "groups": [],
        "shell": "/usr/libexec/openssh/sftp-server",
        "new": 0,
        "expires": "no"
    }
}

As you can see “members” key on list-groups and “groups” key on list-users are empty. Shouldn’t this two keys contains a list with groups/members respectively ?

2

@support_team
Has somebody an answer here?

3

Groups are not expanded because it’s a very slow operation. The fields are there for backward compatibility, I think they could be removed now. (/cc @davidep).

To get the members of a group use:

/usr/libexec/nethserver/list-group-members <name>
4 Likes