<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 06/21/2012 12:25 PM, george he wrote:
<blockquote
cite="mid:1340303117.51986.YahooMailNeo@web120005.mail.ne1.yahoo.com"
type="cite">
<div style="color: rgb(0, 0, 0); background-color: rgb(255, 255,
255); font-family: times new roman,new york,times,serif;
font-size: 12pt;">
<div>Hello all,</div>
<div><br>
</div>
<div>After the server and the client are installed, I run</div>
<div><br>
</div>
<div>ipa user-add myname<br>
</div>
<div><br>
</div>
<div>to add users. The users are added successfully, but each
user get his own GID, which is the same as his UID, even
though "ipa config-show --all" shows<br>
</div>
<div> Default users group: ipausers<br>
</div>
<div><br>
</div>
<div>How do I put all new users to this ipausers group? If I use
--gidnumber=INT, how to find out the GID of the ipausers
group?</div>
<div><br>
</div>
<div>I tried to delete a user using "ipa user-del myname", but
the private group myname is left there. So I did the
following:<br>
</div>
<div><br>
</div>
<div># ipa group-del myname<br>
ipa: ERROR: Deleting a managed group is not allowed. It must
be detached first.<br>
# ipa group-detach myname<br>
ipa: ERROR: myname: group not found<br>
</div>
<div># ipa user-add myname<br>
First name: myfirstname<br>
Last name: mylastname<br>
ipa: ERROR: Unable to create private group. A group 'myname'
already exists.<br>
<br>
</div>
<div>How do I get out of this loop?</div>
</div>
</blockquote>
<br>
What is your platform and 389-ds-base version?<br>
<br>
I'm not familiar with group-detach, but you can manually detach and
remove the private group using ldapsearch and ldapmodify:<br>
<br>
assuming you have done kinit admin:<br>
1) ldapsearch -LLL -Y GSSAPI cn=myname dn<br>
This will give you the DN of the group - ignore any entries in the
compat tree<br>
<br>
2) ldapmodify -Y GSSAPI <<EOF<br>
dn: DN of the group from ldapsearch<br>
changetype: modify<br>
delete: objectclass<br>
objectclass: mepManagedEntry<br>
-<br>
delete: mepManagedBy<br>
-<br>
<br>
dn: DN of the group from ldapsearch<br>
changetype: delete<br>
EOF<br>
<br>
This will remove the private group.<br>
<blockquote
cite="mid:1340303117.51986.YahooMailNeo@web120005.mail.ne1.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff; font-family:times
new roman, new york, times, serif;font-size:12pt">
<div><br>
</div>
<div>Thanks,</div>
<div>George</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
</body>
</html>