[Freeipa-users] Re: local group membership for freeipa user

2018-02-04 Thread John Ratliff via FreeIPA-users

On 2/4/2018 5:55 AM, Jakub Hrozek via FreeIPA-users wrote:

On Sat, Feb 03, 2018 at 08:33:19PM -0500, John Ratliff via FreeIPA-users wrote:

I want my administrators to be part of the systemd-journal group so they can
run journalctl. How can I make a group part of a local system group like
this inside ipa so I don't have to add them to every group on every system?


https://sourceware.org/glibc/wiki/Proposals/GroupMerging

https://sgallagh.wordpress.com/2016/01/28/remote-group-merging-for-fedora/
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org



So it sounds like I just make a group in IPA with the same GID and 
glibc/NSS makes it go.


Thanks.

___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org


[Freeipa-users] Re: local group membership for freeipa user

2018-02-04 Thread Jakub Hrozek via FreeIPA-users
On Sat, Feb 03, 2018 at 08:33:19PM -0500, John Ratliff via FreeIPA-users wrote:
> I want my administrators to be part of the systemd-journal group so they can
> run journalctl. How can I make a group part of a local system group like
> this inside ipa so I don't have to add them to every group on every system?

https://sourceware.org/glibc/wiki/Proposals/GroupMerging

https://sgallagh.wordpress.com/2016/01/28/remote-group-merging-for-fedora/
___
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org