adclient.local.account.group.notification.cli

When a UNIX agent successfully syncs the local group account profiles in the zone to the local group file, there could be local groups added, modified (membership or gid changed), or removed. This configuration parameter specifies a separate command-line interface (CLI) that the UNIX agent invokes in another process when managed local groups change. You can also set this configuration parameter using group policy.

The agent calls the command with:

• -g: Added or modified group names are passed in a comma-separated list.

• -G: Removed group names are passed in a comma-separated list.

• -c <computer>: Same as the user notification CLI.

• -z <zone dn>: Same as the user notification CLI.

This CLI shares the adclient.local.account.notification.cli.arg.length.max cap.

This CLI is independent of adclient.local.account.notification.cli. The group CLI is triggered only when this property is set, so existing user-only deployments are unaffected. The same script can be used for both properties.

The default value is EMPTY.

The parameter only takes effect when adclient.local.account.manage is true.