On 03/10/2015 03:27 PM, Rob Crittenden wrote: > Petr Vobornik wrote: >> Hi, >> >> I would like to ask what is a purpose of a default user group - by >> default ipausers? Default group is also a required field in ipa config. > > To be able to apply some (undefined) group policy to all users. I'm not > aware that it has ever been used for this.
I would also interested in the use cases, especially given all the pain we have with ipausers and large user bases. Especially that for current policies (SUDO, HBAC, SELinux user policy), we always have other means to specify "all users". > >> In ipa migrate-ds we also set the group to all users who are not member >> of anything. Why is it important for a user to be a member of a group? >> >> Thank you > > Every POSIX user needs a default GID. We don't create user-private > groups for migrated users. > > rob > -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
