diff --git a/lib/ansible/modules/identity/ipa/ipa_group.py b/lib/ansible/modules/identity/ipa/ipa_group.py index a13cd5219f..2a9e7af973 100644 --- a/lib/ansible/modules/identity/ipa/ipa_group.py +++ b/lib/ansible/modules/identity/ipa/ipa_group.py @@ -10,7 +10,6 @@ ANSIBLE_METADATA = {'metadata_version': '1.1', 'status': ['preview'], 'supported_by': 'community'} - DOCUMENTATION = ''' --- module: ipa_group @@ -195,6 +194,10 @@ def get_group_diff(client, ipa_group, module_group): module_group['posix'] = True del module_group['nonposix'] + if 'external' in module_group: + if module_group['external'] and 'ipaexternalgroup' in ipa_group.get('objectclass'): + del module_group['external'] + return client.get_diff(ipa_data=ipa_group, module_data=module_group)