On Thu, 2009-12-10 at 15:46 +1000, David O'Brien wrote:
1. No facility for renaming a group? e.g. groupmod -n <oldName>
<newName>
You may want to open an RFE.
2. No facility for creating multiple groups? (Actually in a separate
email with examples, but no replies yet)
No, keep in mind the local provider atm is used primarily for testing,
as people will most probably keep using /etc/passwd and /etc/group, in
any case it is quite unlikely you are going to add many groups at a time
to a local machine, you'll rather use a centralized LDAP/IPA server if
you have that many users/groups.
3. No facility to remove a user from a group if that group membership
is
by way of nested groups? I don't know if this is something that might be
required or useful, if it would be problematic or dangerous, I just
noticed that it failed:
[root@alice ~]# sss_usermod -r GroupB UserC
Could not modify user - user already member of groups?
Uhmm the error message may be better, but it simply is not possible to
remove a user from a group if it comes from a nested membership.
You will have to remove the user from the group it belongs to. Or remove
the nested group from the outer group.
I think that's all for now. Sending before VPN dies again :)
Simo.
--
Simo Sorce * Red Hat, Inc * New York