On pe, 01 marras 2019, Kimmo Rantala via FreeIPA-users wrote:
From nsswitch.conf(5):
merge [SUCCESS=merge] is used between two database entries. When a
group is located in the first of the two group entries,
processing will continue on to the next one. If the group is
also found in the next entry (and the group name and GID are
an exact match), the member list of the second entry will be
added to the group object to be returned. Available since glibc
2.24. Note that merging will not be done for getgrent(3) nor
will duplicate members be pruned when they occur in both
entries being merged.
RHEL 7's glibc has it since 2.17-168.
So a possible solution would be to create a group in IPA with name
staff with GID 500? Is that what you are saying? I thought that this
was a big no-no in IPA especially when the GID < 1000
This is specifically for group merging in glibc. Before group merging
feature was implemented it was 'big no-no', indeed. But if you have to
belong to group 'staff', you stuck with it and there is a solution for
that.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
