the attribute that has the numeric group # in posixaccount / posixgroup schema is 'gidnumber'. So if that's what you're using take your example and change all the gid to gidnumber, should work? And just set the gidnumber on the posixaccount to the gidnumber of whichever group you want to be the primary group.

We set up all our users to have groups with only themself in it, with the same name as their account (so that in typical unix fashion they can have their files owned by user:user, instead of the group ownership being forced to something else). We also have them all members of various groups, but their primary group (via gidnumber in their account LDAP entry) is set to match their named group (same gidnumber). In your case, you just set gidnumber to match the gidnumber of the group you want to be the primary group.

On Mon, May 27, 2013 at 8:00 AM, Aziza Lichir <aziza.lichir@gmail.com> wrote:

Hello again,

I'll explain what I want exactly, let's say I have some users and some groups in my DS base :
for example:

#user
uid=user1
gid=38401
memberOf= cn=group1
memberOf= cn=group2
memberOf= cn=group3

#groups
cn=group1
gid=38430
uniqueMember= uid=user1
uniqueMember= uid=user2
uniqueMember= uid=user3

cn=group2
gid=38432
uniqueMember= uid=user1
uniqueMember= uid=user2
uniqueMember= uid=user4

what i want is that the gid of user1 will be the same as the gid of the "main" group that he belongs to, (group1 or group2 in the example), I don't know if the main groups exist in 389 DS like in Active directory,I was looking for a solution but i couldn't find anything.

Thanking you in advance for your help

___________________________________________________________

Aziza Lichir

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users