[Freeipa-devel] [PATCH] 0067 Set Domain Users SID for ipausers group
Alexander Bokovoy
abokovoy at redhat.com
Tue Jul 31 13:40:01 UTC 2012
On Tue, 31 Jul 2012, Alexander Bokovoy wrote:
> Hi,
>
> Set 'Domain Users' SID for ipausers group during ipa-adtrust-install
>
> Since all users belong to ipausers group, setting Domain Users SID
> (-513) will give them status of domain users. This is needed for
> Kerberos driver to generate MS-PAC.
I've created a ticket for this and primary group fallback issue:
https://fedorahosted.org/freeipa/ticket/2955
--
/ Alexander Bokovoy
More information about the Freeipa-devel
mailing list