MemberofindirectGroup doesn's support multiple return values

[artem-sidorenko]

I want to get indirect memberships of particular user via UserShow, e.g. if group ipausers is member in two other groups hiddengroup and secondhiddengroup.

Via CLI it works fine:

$ ipa user-show testuser
  User login: testuser
  First name: test
  Last name: test
  Home directory: /home/testuser
  Login shell: /bin/sh
  Principal name: [email protected]
  Principal alias: [email protected]
  Email address: [email protected]
  UID: 1377000025
  GID: 1377000025
  Account disabled: False
  Password: False
  Member of groups: ipausers
  Indirect Member of group: secondhiddengroup, hiddengroup     <---- two results
  Kerberos keys available: False

Via freeipa.UserShow I get an error from UserShow:

unexpected value for field MemberofindirectGroup: [secondhiddengroup hiddengroup]; expected at most one element 

$ ipa --version
VERSION: 4.6.8, API_VERSION: 2.237
$ rpm -qa | grep ipa
ipa-common-4.6.8-5.el7.centos.4.noarch
python2-ipaserver-4.6.8-5.el7.centos.4.noarch
python-ipaddress-1.0.16-2.el7.noarch
python-iniparse-0.4-9.el7.noarch
ipa-client-common-4.6.8-5.el7.centos.4.noarch
libipa_hbac-1.16.5-10.el7_9.7.x86_64
python-libipa_hbac-1.16.5-10.el7_9.7.x86_64
python2-ipaclient-4.6.8-5.el7.centos.4.noarch
ipa-client-4.6.8-5.el7.centos.4.x86_64
ipa-server-dns-4.6.8-5.el7.centos.4.noarch
sssd-ipa-1.16.5-10.el7_9.7.x86_64
ipa-server-common-4.6.8-5.el7.centos.4.noarch
python2-ipalib-4.6.8-5.el7.centos.4.noarch
ipa-server-4.6.8-5.el7.centos.4.x86_64