Re: [389-users] getent group doesnt show any ldap groups

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, May 4, 2010 at 7:31 PM, John A. Sullivan III
<jsullivan@xxxxxxxxxxxxxxxxxxx> wrote:
> Sure - go to the advanced properties of the group.  Look at the
> objectclass attribute.  If it does not contain posixgroup (I believe
> that's the correct value - I'm not looking at my 389 right now), click
> in the list of values and then click add value.  Choose posixgroup from
> the list.
>
> Then click on add attribute and choose memberuid from the list.  There
> will be a blank field for memberuid.  Enter the first uid.  To enter
> additional uids, click add value and enter the new uid - John

John, thanks, this is great....I decided to try something based on
this. Since both users I'd added have the same gid, I noticed a
gidnumber field was added when I added posixgroup to Object class. I
set this fields value to that of the users gid. I removed the
previously added memberuid attribute that had the uid vaules of the
two users:

ardy@daw1~$ getent group guitar
guitar:*:1200:graz,mraz
ardy@daw1~$ id graz
uid=1200(graz) gid=1200(guitar) groups=1200(guitar)
ardy@daw1~$ id mraz
uid=1201(mraz) gid=1200(guitar) groups=1200(guitar)

Seems to me, at this juncture, its unnecessary to add the memberuid
attribute and fill it with uid values?

Some more experimenting, added another group, added posixgroup to
Object class, set the gidnumber for the group, added the same two
users to it:

ardy@daw1~$ getent group amplifier
amplifier:*:1201:graz,mraz
ardy@daw1~$ id graz
uid=1200(graz) gid=1200(guitar) groups=1200(guitar),1201(amplifier)
ardy@daw1~$ id mraz
uid=1201(mraz) gid=1200(guitar) groups=1200(guitar),1201(amplifier)

Now, while getent shows all groups for a user, is there a way to see
all the groups a specific user is in with 389-console, I'm not seeing
any secondary groups in advanced properties for the user.

Thanks again John, this really helped!

-- 
aRDy Music and Rick Dicaire present:
http://www.ardynet.com
http://www.ardynet.com:9000/ardymusic.ogg.m3u
--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users


[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux