[Freeipa-devel] Purpose of default user group

[Rob Crittenden]

Petr Vobornik wrote:
> Hi,
> 
> I would like to ask what is a purpose of a default user group - by
> default ipausers? Default group is also a required field in ipa config.

To be able to apply some (undefined) group policy to all users. I'm not
aware that it has ever been used for this.

> In ipa migrate-ds we also set the group to all users who are not member
> of anything. Why is it important for a user to be a member of a group?
> 
> Thank you

Every POSIX user needs a default GID. We don't create user-private
groups for migrated users.

rob