You can specify the GID when you create user groups in freeIPA.
In the GUI it's very clear (Group name[required], Description, Group Type,
GID).
CLI it's something like # ipa group-add <group name> --gid=<GID>
On Wed, Oct 23, 2019 at 3:12 PM Jason Dunham via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
Hi I'm trying to figure out the best practice for groups on my
client
servers.
I have several computation workstation hosts that have been added as
freeipa clients, and several engineers who want to run docker on them
Members of the 'docker' group (gid=999 on some machines, for example) can
run docker without needing sudo, which is what I want to roll out to all
machines. Ideally this would be managed from freeipa with LDAP groups, and
so anyone in the 'engineers' group should also be a member of the
'docker'
group.
When I create a 'docker' group on freeIPA it will have some other gid and
the client sees that.
Should I just delete the original docker group from my hosts and let it
get it from ldap, or should I go into /etc/group and change the gid to the
one that matches the right ldap gid, or preferably something easier than
that?
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...