enabling posixGroup for a group (error : attribute "uidNumber" not allowed)

[nkinder at redhat.com (Nathan Kinder)]

On 07/06/2010 09:08 AM, Daniel Maher wrote:
> On 07/06/2010 05:31 PM, Nathan Kinder wrote:
>
>    
>>> http://directory.fedoraproject.org/wiki/Howto:DNA
>>>        
>    
>> The way you have DNA configured will cause it to try to add a
>> "uidNumber" attribute to a posixGroup entry.  You should change the
>> "dnaFilter" attribute for your "cn=UID numbers" DNA config entry to be
>> "(objectClass=posixAccount)".
>>      
>
> To clarify then, for the uids, instead of this :
>
> dnafilter: (|(objectclass=posixAccount)(objectclass=posixGroup))
>
> It should be this :
>
> dnafilter: (objectclass=posixAccount)
>
> ?
>    
Yes, that is correct.  The current setting you have causes DNA to add a 
"uidNumber" attribute to newly created "posixAccount" and "posixGroup" 
entries.  You only want DNA to add the "uidNumber" attribute to 
"posixAccount" entries.