CLI commands almost always fetch all members. This is behavior is not always what the user wants.
E.g: an IPA setup with thousands of users. ipa group-find call will fetch all groups with all members. The list of members will take some much space and fill many terminal screens that the user will have hard time determining what groups are actually there. He might not be interested in the members list at all.
ipa group-find
Proposal: 1. make --no-members list public, this will speedup the group fetch because it will skip member processing 2. change default behavior of fetching members: e.g. if there is more than 100 users, the CLI will display only the number of users if there is less, it will list all of them. With new option --all-members it will list all of them regardless of the number. 3. optionally introduce option --skip-indirect-members or --no-indirect to skip indirect member processing
--no-members
--all-members
--skip-indirect-members
--no-indirect
related to #4965
Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1204637 (Red Hat Enterprise Linux 7)
There is not enough time left in 4.2 development to do this, we have to move it to next release.
master:
Metadata Update from @pvoborni: - Issue assigned to mbasti - Issue set to the milestone: FreeIPA 4.4
Login to comment on this ticket.