[SSSD] questions about groups in sssd

David O'Brien davido at redhat.com
Mon Dec 21 03:18:36 UTC 2009


Simo Sorce wrote:
> On Thu, 2009-12-10 at 15:46 +1000, David O'Brien wrote:
>> 1. No facility for renaming a group? e.g. groupmod -n <oldName> <newName>
> 
> You may want to open an RFE.

#348 (I inverted the oldName and newName suggestion in the ticket 
because that's how the commands seem to work. I'll leave that up to you 
guys :-) )
> 
>> 2. No facility for creating multiple groups? (Actually in a separate 
>> email with examples, but no replies yet)
> 
> No, keep in mind the local provider atm is used primarily for testing,
> as people will most probably keep using /etc/passwd and /etc/group, in
> any case it is quite unlikely you are going to add many groups at a time
> to a local machine, you'll rather use a centralized LDAP/IPA server if
> you have that many users/groups.
> 
>> 3. No facility to remove a user from a group if that group membership is 
>> by way of nested groups? I don't know if this is something that might be 
>> required or useful, if it would be problematic or dangerous, I just 
>> noticed that it failed:
>> [root at alice ~]# sss_usermod -r GroupB UserC
>> Could not modify user - user already member of groups?
> 
> Uhmm the error message may be better, but it simply is not possible to
> remove a user from a group if it comes from a nested membership.
> You will have to remove the user from the group it belongs to. Or remove
> the nested group from the outer group.

Yes, that's all I came up with as well. Ok, thanks.

> 
>> I think that's all for now. Sending before VPN dies again :)
> 
> Simo.
> 


-- 

David O'Brien
Red Hat Asia Pacific
+61 7 3514 8189

http://freeipa.org/page/DocumentationPortal
http://git.fedorahosted.org/git/ipadocs.git

He who asks is a fool for five minutes, but he who does not ask remains 
a fool forever."
  ~ Chinese proverb



More information about the sssd-devel mailing list