[Freeipa-users] How do I create single sudo grpoup for both Centos and Ubuntu?

[Jakub Hrozek]

On Mon, May 02, 2016 at 10:22:49AM -0400, Rob Crittenden wrote:
> Przemysław Orzechowski wrote:
> > Hi
> > 
> > Im trying to create a single usergroup for sudo enabled users for both
> > Centos and Ubuntu users
> > The problem is on centos its group wheel (10), and on ubuntu its sudo
> > (27) how do i have tried to do it using ID view but somehow im not
> > getting it right
> > 
> > btw
> > Centos clients versions 6.x, 7.x
> > Ubuntu clients versions 12.04,14.04,16.04
> > Ipa server is on Centos 7  IPA VERSION: 4.2.0, API_VERSION: 2.156
> > 
> > Regards
> > Przemyław Orzechowski
> > 
> 
> But aren't these groups used only if you use files for sudo (and even that
> is just a default)? If you are using IPA to provide the sudo rules then the
> group you choose shouldn't matter.
> 
> rob

Doesn't polkit also use membership in these group to determine if the
user is a 'local admin' ? I haven't configured this kind of setup
myself, though. But if it is the case, the user is probably looking for:
    https://sourceware.org/glibc/wiki/Proposals/GroupMerging