Re: [Freeipa-users] Default gid for AD trust users

2016-09-05 Thread Orion Poplawski
On 09/02/2016 03:15 PM, Lukas Slebodnik wrote: On (24/08/16 11:42), Orion Poplawski wrote: While that is definitely *a* convention, it's not the one we've used which puts users by default in shared groups (nwra, visitors, etc). For example: uid=2941(user) gid=1991(nwra) The user "user"

Re: [Freeipa-users] Default gid for AD trust users

2016-09-02 Thread Lukas Slebodnik
On (24/08/16 11:42), Orion Poplawski wrote: >While that is definitely *a* convention, it's not the one we've used which >puts users by default in shared groups (nwra, visitors, etc). For example: > >uid=2941(user) gid=1991(nwra) > The user "user" should be a member "nwra" group. If no then you

Re: [Freeipa-users] Default gid for AD trust users

2016-09-02 Thread Orion Poplawski
FWIW - I've filed https://fedorahosted.org/freeipa/ticket/6293 to request the ability to set the primary group for AD trust users. On 08/24/2016 11:42 AM, Orion Poplawski wrote: > While that is definitely *a* convention, it's not the one we've used which > puts users by default in shared groups

Re: [Freeipa-users] Default gid for AD trust users

2016-08-24 Thread Orion Poplawski
While that is definitely *a* convention, it's not the one we've used which puts users by default in shared groups (nwra, visitors, etc). For example: uid=2941(user) gid=1991(nwra) We may be fine changing conventions, but I'm researching whether or not we have to. Thanks. On 08/24/2016 11:19

Re: [Freeipa-users] Default gid for AD trust users

2016-08-24 Thread Justin Stephenson
Could you please explain further what you are trying to accomplish with an AD trust default group? I believe we are following the standard linux convention of creating a user private group using the ID number which matches the uid number for AD trust users. Kind regards, Justin Stephenson