Re: [Freeipa-users] Different primary group on different machines.

2012-10-26 Thread Ondrej Valousek
Sorry sir, but technically it is the sgid bit that is a gross hack. The Posix draft for ACLs never got final approval, but it is pretty standardized across most OSs, and works fine for any Linux OS that isn;t on ancient kernels. It is also enabled by default on all file systems that matter normall

Re: [Freeipa-users] Different primary group on different machines.

2012-10-26 Thread Simo Sorce
On Fri, 2012-10-26 at 09:36 +0200, Ondrej Valousek wrote: > Well, you do not need ACLs for that, just 'chmod g+s ' will > do. This is what makes people ask for changing the GID, which is suboptimal on many accounts. The reason why FreeIPA creates a User Private Group is that the default umask pre

Re: [Freeipa-users] Different primary group on different machines.

2012-10-26 Thread Natxo Asenjo
hi, yes, you are correct :-). Being a recent nfsv4 acls fan has made me forget that. -- Groeten, natxo On Fri, Oct 26, 2012 at 9:36 AM, Ondrej Valousek wrote: > Well, you do not need ACLs for that, just 'chmod g+s ' will do. > But in general, I agree, this is insane requirement as nobody would

Re: [Freeipa-users] Different primary group on different machines.

2012-10-26 Thread Ondrej Valousek
Well, you do not need ACLs for that, just 'chmod g+s ' will do. But in general, I agree, this is insane requirement as nobody would ever think of it in Windows. Not happy w/ a traditional Unix permissions? Go for ACLs. The only pity is that the current Posix-draft hack widely used on all Linuxes

Re: [Freeipa-users] Different primary group on different machines.

2012-10-26 Thread Natxo Asenjo
On Thu, Oct 25, 2012 at 9:11 PM, KodaK wrote: > We have many different development groups, but people can be members > of multiple groups. For collaboration, they'd like it when creating a > file to have that file have a group ownership of "foo" on machine-A, > but "bar" on machine-B. I'd like

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread Dmitri Pal
On 10/25/2012 05:04 PM, KodaK wrote: > On Thu, Oct 25, 2012 at 2:30 PM, Dmitri Pal wrote: >> On 10/25/2012 03:11 PM, KodaK wrote: >>> On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal wrote: On 10/25/2012 11:49 AM, KodaK wrote: > I've been having users use the "newgrp" command to change their

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread KodaK
On Thu, Oct 25, 2012 at 2:30 PM, Dmitri Pal wrote: > On 10/25/2012 03:11 PM, KodaK wrote: >> On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal wrote: >>> On 10/25/2012 11:49 AM, KodaK wrote: I've been having users use the "newgrp" command to change their primary group on different machines.

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread Dmitri Pal
On 10/25/2012 03:11 PM, KodaK wrote: > On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal wrote: >> On 10/25/2012 11:49 AM, KodaK wrote: >>> I've been having users use the "newgrp" command to change their >>> primary group on different machines. >>> >>> I've poked around in the docs a bit and I don't se

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread KodaK
On Thu, Oct 25, 2012 at 12:35 PM, Dmitri Pal wrote: > On 10/25/2012 11:49 AM, KodaK wrote: >> I've been having users use the "newgrp" command to change their >> primary group on different machines. >> >> I've poked around in the docs a bit and I don't see this addressed. I >> know, I know: "if it

Re: [Freeipa-users] Different primary group on different machines.

2012-10-25 Thread Dmitri Pal
On 10/25/2012 11:49 AM, KodaK wrote: > I've been having users use the "newgrp" command to change their > primary group on different machines. > > I've poked around in the docs a bit and I don't see this addressed. I > know, I know: "if it works, use it" -- but I'm wondering if I'm just > missing a

[Freeipa-users] Different primary group on different machines.

2012-10-25 Thread KodaK
I've been having users use the "newgrp" command to change their primary group on different machines. I've poked around in the docs a bit and I don't see this addressed. I know, I know: "if it works, use it" -- but I'm wondering if I'm just missing a way to do it with IPA, or if there's another wa