[Freeipa-users] Default gid for AD trust users

[Orion Poplawski]

On 09/02/2016 03:15 PM, Lukas Slebodnik wrote:
> On (24/08/16 11:42), Orion Poplawski wrote:
>> While that is definitely *a* convention, it's not the one we've used which
>> puts users by default in shared groups (nwra, visitors, etc).  For example:
>>
>> uid=2941(user) gid=1991(nwra)
>>
> The user "user" should be a member "nwra" group.
> If no then you have other issues.
>
> Why does it matter whether it is a primary group or no?
>
> LS
>

Because that is the default group ownership of files created by the 
user.  Yes, they can change it, and yes you can use setgid directories, 
but it is the default.

-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA/CoRA Division                    FAX: 303-415-9702
3380 Mitchell Lane                  orion at cora.nwra.com
Boulder, CO 80301              http://www.cora.nwra.com