12 April,16 at 10:57 AM
Centrify has the following parameter in /etc/centrifydc/centrifydc.conf to add local group member(s) to the AD group. # adclient.local.group.merge: false change to: adclient.local.group.merge: true Once it is uncommented and set to true, first getent group entry (from AD) will now show local members as well. Then run, # adflush -f
# adreload
All of the above steps does is, when asked about members of a given AD group, adclient will merge local group (same name and gid) members into the list from AD and return members when a command like getent is issued.
Note: "adquery group" command will not list all members of the merged group. Only AD group members.