Please excuse a possible thread hijack
Is this (IPA)global or can it be done on select hosts ?
______________________________________________________________________________________________
Daniel E. White
daniel.e.white@nasa.gov
NASCOM Linux Engineer
NASA Goddard Space Flight Center
Science Applications International Corporation (SAIC)
Office: (301) 286-6919
Mobile: (240) 513-5290
From:
FreeIPA-Users <freeipa-users@lists.fedorahosted.org>
Reply-To: FreeIPA-Users <freeipa-users@lists.fedorahosted.org>
Date: Wednesday, January 27, 2021 at 07:19
To: FreeIPA-Users <freeipa-users@lists.fedorahosted.org>
Cc: Ronald Wimmer <ronaldw@ronzo.at>, Alexander Bokovoy <abokovoy@redhat.com>
Subject: [EXTERNAL] [Freeipa-users] Re: Can an IPA user be member of a local group
On ke, 27 tammi 2021, Ronald Wimmer via FreeIPA-users wrote:
I would like an IPA user to be member of the local 'docker' group. Is
this possible?
Yes. This is called 'group merging'.
You need to have the following in your nsswitch.conf:
# Allow initgroups to default to the setting for group.
initgroups: sss [SUCCESS=merge] files
Then create 'docker' group in IPA, add IPA user there. glibc on the host
will merge groups membership from SSSD witht he group membership from
'files' provider.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________
FreeIPA-users mailing list --
freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to
freeipa-users-leave@lists.fedorahosted.org