Fedora directory users - Aug 2007 - GID missing? Probably minor but strange problem

Fresh install of FDS 1.4.
I am using the default ( option 2 typical install ) dc=mydomain,dc=com 
install.
I can add users with no problems, and configure clients ( other linux 
boxes ) to authenticate against this LDAP server.

One problem though, If I create a user, with posix, specify a new uid 
and gid, all is well except on login, the group is not created.

So, I go to add the group, I can add the group name, but there is no 
place to specify the GID. 
What am I missing? 

Right click, add user is file with all posix, then do the same on group, 
but no area to specify the numeric GID.

Assistance greatly appreciated.

Mark Hutchinson wrote:
> Fresh install of FDS 1.4.
> I am using the default ( option 2 typical install ) dc=mydomain,dc=com 
> install.
> I can add users with no problems, and configure clients ( other linux 
> boxes ) to authenticate against this LDAP server.
> 
> One problem though, If I create a user, with posix, specify a new uid 
> and gid, all is well except on login, the group is not created.
> 
> So, I go to add the group, I can add the group name, but there is no 
> place to specify the GID. What am I missing?
> Right click, add user is file with all posix, then do the same on group, 
> but no area to specify the numeric GID.
	Mark, if you using the console, first you need to add the objectclass 
posixgroup (under advanced properties of that group). This should give 
you a gidnumber field. Without that objectclass, it just a group (not a 
posix group).

-Satish.
> 
> Assistance greatly appreciated.
> 
> 
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

How the heck do I set permissions so that admin can
manage password policy? I did it once a while back but
can''t remember.

Since I don''t have permissions, every time I try to
manage password policy in the java console the window
just blanks out and that''s what I am after fixing with
permissions, I just can''t remember how I did it last
time

Another interesting question would be, why isn''t the
admin by default not allowed to manage passwords for
users and groups, etc.? That just doesn''t make sense.
You''d think the person who set the server up (ie-
admin) should have the ability to manage users/groups
passwords without playing a bunch with ACIs.

Thanks in advance. 


       
____________________________________________________________________________________
Be a better Heartthrob. Get better relationship answers from someone who knows.
Yahoo! Answers - Check it out.
http://answers.yahoo.com/dir/?link=list&sid=396545433

Jeff wrote:
> How the heck do I set permissions so that admin can
> manage password policy? I did it once a while back but
> can''t remember.
>   
I''m assuming you mean the console admin user?
> Since I don''t have permissions, every time I try to
> manage password policy in the java console the window
> just blanks out and that''s what I am after fixing with
> permissions, I just can''t remember how I did it last
> time
>
> Another interesting question would be, why isn''t the
> admin by default not allowed to manage passwords for
> users and groups, etc.?
The admin is by default allowed to manage passwords, if you use the 
setup program and have it create your DIT for you.
> That just doesn''t make sense.
> You''d think the person who set the server up (ie-
> admin) should have the ability to manage users/groups
> passwords without playing a bunch with ACIs.
>   
There really is no way around ACIs for any user other than directory 
manager.  The setup program tries to be smart about adding the right 
ACIs to various places.  But if you import an LDIF file, you have to add 
the ACIs manually.
> Thanks in advance. 
>
>
>        
>
____________________________________________________________________________________
> Be a better Heartthrob. Get better relationship answers from someone who
knows. Yahoo! Answers - Check it out.
> http://answers.yahoo.com/dir/?link=list&sid=396545433
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

--- Richard Megginson <rmeggins@redhat.com> wrote:
> Jeff wrote:
> > How the heck do I set permissions so that admin
> can
> > manage password policy?
> I''m assuming you mean the console admin user?
Yes, the console admin user.
> The admin is by default allowed to manage passwords,
> if you use the 
> setup program and have it create your DIT for you.
I did use the setup program to configure everything. I
have no permissions as admin to manage passwords on my
LDAP directory, hence the post. Not for Groups, not
for Users...nothing!

I remember changing permissions on something to get it
to work so I could manage passwords with admin, but
don''t remember the specific thing it was...and that is
what I am after.

I am using 1.0.4 for fedora-ds BTW.

Thank you.


       
____________________________________________________________________________________
Got a little couch potato? 
Check out fun summer activities for kids.
http://search.yahoo.com/search?fr=oni_on_mail&p=summer+activities+for+kids&cs=bz

Jeff wrote:
> --- Richard Megginson <rmeggins@redhat.com> wrote:
>
>   
>> Jeff wrote:
>>     
>>> How the heck do I set permissions so that admin
>>>       
>> can
>>     
>>> manage password policy?
>>>       
>> I''m assuming you mean the console admin user?
>>     
>
> Yes, the console admin user.
>
>   
>> The admin is by default allowed to manage passwords,
>> if you use the 
>> setup program and have it create your DIT for you.
>>     
>
> I did use the setup program to configure everything. I
> have no permissions as admin to manage passwords on my
> LDAP directory, hence the post. Not for Groups, not
> for Users...nothing!
>   
Can you post what ACIs you do have?
> I remember changing permissions on something to get it
> to work so I could manage passwords with admin, but
> don''t remember the specific thing it was...and that is
> what I am after.
>
> I am using 1.0.4 for fedora-ds BTW.
>
> Thank you.
>
>
>        
>
____________________________________________________________________________________
> Got a little couch potato? 
> Check out fun summer activities for kids.
>
http://search.yahoo.com/search?fr=oni_on_mail&p=summer+activities+for+kids&cs=bz
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>