When trying to automatically add machines to machine groups and using the enrolledby parameter to specifically pick out the machines wanting to put in which groups, it does not work. The user group seemed to think this was because the enrolledby attribute doesn't get written immediately when the LDAP entry it checked by automember, but after it is checked.
Your analysis is correct. Automember runs when an entry is added. The host is created first (if it doesn't already exist and the user has the proper rights). enrolledBy is added when the join command succeeds.
automember-rebuild, added in 4.0.0, may be a clunky workaround.
Metadata Update from @jmoyer256: - Issue assigned to someone - Issue set to the milestone: Future Releases
Thank you taking time to submit this request for FreeIPA. Unfortunately this bug was not given priority and the team lacks the capacity to work on it at this time.
Given that we are unable to fulfil this request I am closing the issue as wontfix. To request re-consideration of this decision please reopen this issue and provide additional technical details about its importance to you.
Metadata Update from @rcritten: - Issue close_status updated to: wontfix - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.