[Freeipa-users] Timing behavior on access to AD groups

[Dan Dietterich]

I have noticed this behavior when setting up an external AD group:

1. create trust

2. create external group

3. add ***@Domain to external group - FAILS: "trusted domain object not found"

4. retry: add ***@Domain to external group - SUCCESS

Two questions:

1. Is this expected behavior?

2. Is there something I can do - short of sleep-retry - to make this reliably succeed?

Thank you!

Dan