> From nsswitch.conf(5): > merge [SUCCESS=merge] is used between two database entries. When a > group is located in the first of the two group entries, > processing will continue on to the next one. If the group is > also found in the next entry (and the group name and GID are > an exact match), the member list of the second entry will be > added to the group object to be returned. Available since glibc > 2.24. Note that merging will not be done for getgrent(3) nor > will duplicate members be pruned when they occur in both > entries being merged. > > RHEL 7's glibc has it since 2.17-168.
So a possible solution would be to create a group in IPA with name staff with GID 500? Is that what you are saying? I thought that this was a big no-no in IPA especially when the GID < 1000 > I think all this can work with > group merging instead of overrides. > > It might be > something that SSSD doesn't implement here. I think > overrides are applied at the last stage when all POSIX groups are > already collected. Though, I'd let Sumit to comment -- it is SSSD > specifics, not FreeIPA here. This is what I originally thought. But maybe Sumit might be able to shed light on this. - Kimmo _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
