[Freeipa-devel] [PATCH] 975 don't delete system users we add

Martin Kosek mkosek at redhat.com
Wed Feb 29 17:44:56 UTC 2012


On Tue, 2012-02-28 at 23:07 -0500, Rob Crittenden wrote:
> Don't call userdel during uninstall to delete any system users we 
> create. If they are deleted and the system adds another user for some 
> reason (package install, for example) then file ownership can get hosed.
> 
> rob

NACK

There is still a groupdel for dirsrv group. This makes the whole
uninstall to blow up:

# ipa-server-install --uninstall --unattended
Shutting down all IPA services
Removing IPA client configuration
Unconfiguring ntpd
Unconfiguring CA directory server
Unconfiguring CA
Unconfiguring named
Unconfiguring web server
Unconfiguring krb5kdc
Unconfiguring kadmin
Unconfiguring directory server
Unconfiguring ipa_memcached
ipa         : CRITICAL failed to delete group Command
'/usr/sbin/groupdel dirsrv' returned non-zero exit status 8

# /usr/sbin/groupdel dirsrv
groupdel: cannot remove the primary group of user 'pkisrv'

Martin




More information about the Freeipa-devel mailing list