Freeipa/group

@shrug/freeipa/groupv2026.07.11.1· 3d agoMODELS

01README

Manage FreeIPA user & host groups over the JSON-RPC API: snapshot the inventory, ensure the FreeRADIUS radius-vlan- group pair, and add/remove members — idempotent and auditable.

02Models1

@shrug/freeipa/groupv2026.07.11.1group.ts

fn groupFind()

Snapshot user groups (group_find) and host groups (hostgroup_find), including membership.

fn ensureVlanGroup(vlanId: number)

Idempotently ensure the FreeRADIUS radius-vlan-<id> group exists as BOTH an ipausergroup (group_add) and an ipahostgroup (hostgroup_add). Swallows DuplicateEntry so re-runs are safe.

Argument	Type	Required	Description
vlanId	number	yes	VLAN id to steer onto

fn groupAddMember(cn: string)

Add members to a group in one call. kind=user -> group_add_member (user:[...]); kind=host -> hostgroup_add_member (host:[...]). Surfaces IPA's `failed` structure in the audit response.

Argument	Type	Required	Description
cn	string	yes	Target group common name

fn groupRemoveMember(cn: string)

Remove members from a group in one call. kind=user -> group_remove_member (user:[...]); kind=host -> hostgroup_remove_member (host:[...]). Surfaces IPA's `failed` structure in the audit response.