list_pending_zone_groups command to check Active Directory and return a list of pending import groups for the currently selected zone. Pending import groups are group profiles that have been imported from Linux or UNIX computers, but not yet mapped to any Active Directory group. If executed in a script, this command outputs its list to
stdout so that the output appears in the shell where the script is executed. The command does not return a Tcl list back to the executing script. Use
get_pending_zone_groups to return a Tcl list.
Classic and hierarchical
This command takes no options.
This command takes no arguments.
This command returns a list to
stdout of pending import groups for the currently selected zone. Each entry in the list contains the following fields, separated by colons (:):
- Distinguished name (DN) of the pending import group as it is stored in Active Directory. The distinguished name for each pending import group includes a prefix that consists of “PendingGroup” and the globally unique identifier (GUID) for the group.
- UNIX group name.
- Numeric group identifier (GID).
This example returns the list of groups similar to this:
CN=PendingGroup_573135e7-edd9-46b9-9cbd-c839570a90c8,CN=Groups, CN=bean_pz,CN=Zones,CN=Centrify,DC=win2k3,DC=test:root:0 CN=PendingGroup_7878065a-4d2f-4749-8f3b-6ffe24303f6a,CN=Groups, CN=bean_pz,CN=Zones,CN=Centrify,DC=win2k3,DC=test:unixgrp:5000
Before you use this command, you must have a currently selected zone stored in memory. The following command performs actions related to this command:
- get_pending_zone_groups returns a Tcl list of the pending import groups in the current zone.