[Freeipa-devel] [PATCH] 0067 Set Domain Users SID for ipausers group

[Alexander Bokovoy]

On Tue, 31 Jul 2012, Alexander Bokovoy wrote:
> Hi,
> 
> Set 'Domain Users' SID for ipausers group during  ipa-adtrust-install
> 
> Since all users belong to ipausers group, setting Domain Users SID
> (-513) will give them status of domain users. This is needed for
> Kerberos driver to generate MS-PAC.
I've created a ticket for this and primary group fallback issue:
https://fedorahosted.org/freeipa/ticket/2955

-- 
/ Alexander Bokovoy